131179 matches found
Tenda AC8 Buffer Overflow Vulnerability (CNVD-2025-05398)
Tenda AC8 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC8, which stems from a buffer overflow vulnerability in the shareSpeed parameter of the sub49E098 function. An attacker could exploit this vulnerability to corrupt memory and...
SQL Injection Vulnerability in UFIDA BIP of UFIDA Network Technology Co.
UFIDA is a leading provider of management software, ERP software, group management software, human resource management software, customer relationship management software, small business management software, financial and administrative institution management software, automotive industry...
Tenda RX3 Buffer Overflow Vulnerability (CNVD-2025-09163)
The Tenda RX3 is a home wireless router from Tenda, a Chinese company. The Tenda RX3 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service...
NVIDIA Riva riva_quickstart Access Control Error Vulnerability
NVIDIA Riva is a fully accelerated conversational AI application framework released by NVIDIA for building multimodal conversational AI services using end-to-end. An access control error vulnerability exists in NVIDIA Riva rivaquickstart, which can be exploited by an attacker to submit a special...
Tenda RX3 /goform/setPptpUserList Buffer Overflow Vulnerability
The Tenda RX3 is a dual-band WiFi 6 home wireless router from China's Tenda. The Tenda RX3 /goform/setPptpUserList handles a buffer overflow vulnerability in the list parameter, which can be exploited by an attacker to submit a special request that can crash the service program and cause a denial...
Tenda RX3 Buffer Overflow Vulnerability (CNVD-2025-09161)
The Tenda RX3 is a home wireless router from Tenda, a Chinese company. The Tenda RX3 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause the web server to crash, resulting in a denial of service...
GNU GRUB2 Buffer Overflow Vulnerability (CNVD-2025-08319)
GRUB2 is a multiple bootloader for the GNU Project. GNU GRUB2 suffers from a buffer overflow vulnerability that stems from a failure to properly account for the length of an environment variable when copying user-controlled environment variable data to an internal buffer, resulting in an...
Zoom Workplace Apps Buffer Overflow Vulnerability
Zoom Workplace Apps is an enterprise-grade collaboration platform that combines video conferencing, team collaboration, AI assistance, and other features for hybrid office scenarios. Zoom Workplace Apps suffers from a buffer overflow vulnerability that stems from certain applications not properly...
Ivanti Secure Access Client Elevation of Privilege Vulnerability
Ivanti Secure Access Client is a security software client from Ivanti. An elevation of privilege vulnerability exists in Ivanti Secure Access Client that stems from insufficient privilege limitations and can be exploited by an attacker to elevate privileges...
Tenda RX3 Buffer Overflow Vulnerability (CNVD-2025-09162)
The Tenda RX3 is a home wireless router from Tenda, a Chinese company. The Tenda RX3 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service...
Sante PACS Server EVP_DecryptUpdate Buffer Overflow Vulnerability
Sante PACS Server is a medical image management software developed for doctors to view CT in their daily consultations and improve the diagnosis rate. A buffer overflow vulnerability exists in the Sante PACS Server WEB service's EVPDecryptUpdate function that handles usernames and passwords, whic...
NVIDIA Riva Access Control Error Vulnerability
NVIDIA Riva is a fully accelerated conversational AI application framework released by NVIDIA for building multimodal conversational AI services that use end-to-end. NVIDIA Riva suffers from an Access Control Error vulnerability that can be exploited by an attacker to tamper with data and cause a...
Logic Flaw Vulnerability in ZKTime Attendance Management System at Entropy Base Technology Co.
Ltd. is a global provider of products and solutions based on "People, Vehicles and Things" access time and security management system. A logic flaw exists in the ZKTime Time and Attendance Management System of Entropy Base Technology, which can be exploited by attackers to obtain sensitive...
Zoom Workplace Apps Heap Buffer Overflow Vulnerability
Zoom Workplace Apps is an enterprise-grade collaboration platform that combines video conferencing, team collaboration, AI assistance, and other features for hybrid office scenarios. Zoom Workplace Apps suffers from a heap buffer overflow vulnerability that stems from the program not properly...
SQL Injection Vulnerability in Xunrui CMS of Sichuan Xunrui Cloud Software Development Co.
Swift CMS is a content management framework based on CodeIgniter4, which is mainly used for website construction and content management. Sichuan Xunrui Cloud Software Development Co., Ltd. Xunrui CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...
Weak Password Vulnerability in Neusoft NetEye Firewall Software at Neusoft Group Corp.
Neusoft NetEye Firewall Software is a next-generation firewall product that integrates several cutting-edge security technologies. Neusoft NetEye Firewall Software has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...
Logic flaw vulnerability in ECShop of Shanghai ShangPai Network Technology Co.
ECShop is a B2C independent online store system, suitable for businesses and individuals to quickly build a personalized online store. Ltd. ECShop has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...
Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2025-12338)
Adobe Acrobat is the United States of America Odo than Adobe company's set of software suite used to create, edit, view and print PDF Portable Document Format files. A security vulnerability exists in Adobe Acrobat, which stems from an out-of-bounds read issue that can be exploited by an attacker...
Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-05209)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-05202)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Designer version 10.1.2 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the curren...
SAP NetWeaver Application Server ABAP Cross-Site Scripting Vulnerability
SAP NetWeaver Application Server ABAP is an application server from SAP for running ABAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server ABAP that originates from allowing malicious scripts to be executed within the application. An attacker can exploi...
MonetDB Server SQL Injection Vulnerability (CNVD-2025-05227)
MonetDB is MonetDB open source an open source column-oriented relational database management system . A SQL injection vulnerability exists in the expvaluessetsupertype component of MonetDB version 11.49.1, which can be exploited by an attacker to cause a denial of service via a specially crafted...
Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05207)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
WordPress amoCRM WebForm plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin amoCR...
Fortinet FortiSandbox Operating System Command Injection Vulnerability
Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. Fortinet FortiSandbox suffers from an operating system command injection...
Fortinet FortiADC Cross-Site Scripting Vulnerability (CNVD-2025-27463)
Fortinet FortiADC is an application delivery controller from Fortinet, Inc. The Fortinet FortiADC suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute...
Adobe Substance 3D Designer Out-of-Bounds Read Vulnerability (CNVD-2025-05205)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Designer version 1.15.0 and prior versions, which can be exploited by attackers to cause a sensitive memory leak...
Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2025-05250)
Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A heap buffer overflow vulnerability exists in Adobe InDesign ID20.1, ID19.5.2 and earlier versions, which can be exploited by an attacker to cause arbitrary code execution...
Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05204)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A heap buffer overflow vulnerability exists in Adobe Substance 3D Designer 1.15.0 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05199)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A heap buffer overflow vulnerability exists in Adobe Substance 3D Designer 14.1 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
ZTE GoldenDB Input Validation Error Vulnerability
ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An input validation error vulnerability exists in ZTE GoldenDB, which...
Unspecified Vulnerability in Adobe Illustrator (CNVD-2025-05318)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator versions 29.2.1, 28.7.4 and earlier, which originates from a stack buffer overflow that can be exploited by an attacker to cause arbitra...
Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05210)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2025-16323)
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A buffer overflow vulnerability exists in Adobe Acrobat Reader 24.001.30225, 20.005.30748, 25.001.20428 and earlier versions, which stems from uninitialized pointer...
Adobe InDesign Out-of-Bounds Write Vulnerability (CNVD-2025-05693)
Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...
Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2025-16322)
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A buffer overflow vulnerability exists in Adobe Acrobat Reader 24.001.30225, 20.005.30748, 25.001.20428 and earlier versions, which originates from an out-of-bounds...
Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2025-05688)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...
Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-05201)
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Designer versions and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe InDesign Out-of-Bounds Write Vulnerability (CNVD-2025-05691)
Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...
Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2025-05246)
Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
Adobe InDesign Out-of-Bounds Write Vulnerability (CNVD-2025-05690)
Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...
Adobe Substance 3D Designer Null Pointer Dereference Vulnerability
Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Designer 1.15.0 and prior versions, which can be exploited by an attacker to cause the application to crash, resulting in a denial of service conditio...
Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2025-16321)
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a buffer error vulnerability that can be exploited by an attacker to cause arbitrary code execution...
ZTE GoldenDB elevation of privilege vulnerability (CNVD-2025-10903)
ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An elevation of privilege vulnerability exists in ZTE GoldenDB, which...
ZTE GoldenDB Elevation of Privilege Vulnerability
ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An elevation of privilege vulnerability exists in ZTE GoldenDB, which...
WordPress Responsive Google Map plugin suffers from an unspecified vulnerability (CNVD-2025-05453)
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Adobe Illustrator Untrusted Search Path Vulnerability
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An untrusted search path vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code...
SAP NetWeaver Application Server Information Disclosure Vulnerability
SAP NetWeaver Application Server is an application server from SAP, Germany. An information disclosure vulnerability exists in SAP NetWeaver Application Server ABAP, which can be exploited by an attacker with administrative or user directory privileges to disclose data and compromise program...
MonetDB Server SQL Injection Vulnerability
MonetDB is MonetDB open source an open source column-oriented relational database management system . A SQL injection vulnerability exists in the expref component of MonetDB version 11.49.1, which can be exploited by an attacker to cause a denial of service via a specially crafted SQL statement...
ZTE GoldenDB Unauthorized Access Vulnerability
ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An unauthorized access vulnerability exists in ZTE GoldenDB, which stems...