Siemens SENTRON 7KT PAC1260 Data Manager OS Command Injection Vulnerability (CNVD-2025-07809)

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. The Siemens SENTRON 7KT PAC1260 Data Manager suffers from an OS command injection vulnerability that stems from not cleaning up the language parameter of a specific POST request,...

Huawei HarmonyOS Buffer Overflow Vulnerability (CNVD-2025-10520)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a buffer overflow vulnerability that can be exploited by attackers to affect availability...

SAP Commerce Information Disclosure Vulnerability

SAP Commerce is a set of cloud-based e-commerce platforms from Germany's SAP. SAP Commerce suffers from an information disclosure vulnerability that originates from a coupon code being exposed in a URL parameter. An attacker could exploit this vulnerability to obtain and use the leaked coupon cod...

Adobe Commerce Cross-Site Request Forgery Vulnerability (CNVD-2025-08777)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site request forgery vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a denial of service due to the web...

Fortinet FortiAnalyzer Input Validation Error Vulnerability (CNVD-2025-12793)

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

Ivanti Endpoint Manager Cross-Site Scripting Vulnerability (CNVD-2025-15470)

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

Pimcore Admin Classic Bundle Cross-Site Scripting Vulnerability

Pimcore Admin Classic Bundle is a Pimcore open source a core bundle of Pimcore. The Pimcore Admin Classic Bundle suffers from a cross-site scripting vulnerability that stems from HTML injection, which can be exploited by an attacker to steal session cookies...

Adobe Bridge Buffer Overflow Vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a buffer overflow vulnerability, which arises from a failure to properly handle memory allocation during file processing, resulting in a buffer overflow that can be exploited by an attacker to execute...

SAP NetWeaver Application Server ABAP Cross-Site Scripting Vulnerability

SAP NetWeaver Application Server ABAP is an application server from SAP in Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server ABAP, which arises from insufficiently encoded input, allowing an attacker to inject malicious JavaScript.No details of the...

Dell Common Event Enabler Unauthorized Access Vulnerability

Dell Common Event Enabler is a framework from Dell USA. An unauthorized access vulnerability exists in Dell Common Event Enabler. The vulnerability stems from a communication channel that does not properly restrict the target endpoint, resulting in unauthorized access. An attacker could exploit...

Samsung Galaxy Watch Improper Access Control Vulnerability

The Samsung Galaxy Watch is a smartwatch that offers a variety of features, including fitness tracking, notifications, and mobile payments. An Improper Access Control vulnerability exists in Samsung Galaxy Watch. The vulnerability stems from improper access control. An attacker could exploit the...

Google Pixel Local Elevation of Privilege Vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a local elevation of privilege vulnerability, which stems from a logic error in the s2mpu.c file, which can be used to bypass mitigations and can be exploited by an attacker to perform a local elevatio...

Siemens SENTRON 7KT PAC1260 Data Manager Access Control Error Vulnerability (CNVD-2025-07812)

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. An access control error vulnerability exists in the Siemens SENTRON 7KT PAC1260 Data Manager, which originates from an unauthenticated report creation request, and can be exploite...

Fortinet FortiClient Cross-Site Scripting Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. Fortinet FortiClient suffers from a cross-site scripting...

PCMan FTP Server CONF Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from CONF Command Handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of service...

Patient Record Management System dental_pending.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the /dentalpending.php file. An attacker can exploit...

Esri Portal for ArcGIS Hardcoded Credentials Vulnerability

Esri Portal for ArcGIS is a Web-based geographic information system GIS platform. A hard-coded credentials vulnerability exists in Esri Portal for ArcGIS, which can be exploited by an attacker to gain administrative access to the system...

Adobe After Effects Buffer Overflow Vulnerability (CNVD-2025-09274)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe After Effects, which stems from a failure to properly handle read operations at memory boundaries and can be exploited by...

Adobe Commerce Access Control Error Vulnerability (CNVD-2025-08783)

Adobe Commerce is a leading global digital commerce solution for merchants and brands. Adobe Commerce suffers from an Access Control Error vulnerability that stems from improper access control, and no detailed vulnerability details are available at this time...

There are logic flaws and vulnerabilities in the Fast Shadow APP of Beijing Shutterstock Technology Co.

Fast Shadow App is a video shooting, video editing and video making tool. A logic flaw vulnerability exists in the Fast Shadow APP of Beijing Racer Technology Limited, which can be exploited by attackers to cause a denial of service...

Huawei HarmonyOS and EMUI Access Control Vulnerability (CNVD-2025-10516)

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An access control vulnerability exists in Huawei HarmonyOS and EMUI.The vulnerability stems from improper access...

Huawei HarmonyOS Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from a buffer overflow vulnerability, which originates in the codec module, that can be exploited by an attacker to affect availability...

Fortinet FortiWeb Cross-Site Scripting Vulnerability (CNVD-2025-12796)

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content...

Dell PowerScale OneFS Information Disclosure Vulnerability

Dell PowerScale OneFS is an operating system for horizontally scalable NAS from Dell USA. An information disclosure vulnerability exists in PowerScale OneFS. The vulnerability stems from the disclosure of directory listing information. An attacker could exploit this vulnerability to obtain...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15528)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a security issue in the SVG parsing module, and can be exploited by an attacker to affe...

Siemens SENTRON 7KT PAC1260 Data Manager OS Command Injection Vulnerability (CNVD-2025-07810)

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. The Siemens SENTRON 7KT PAC1260 Data Manager suffers from an OS command injection vulnerability that stems from not cleaning up the region parameter of a specific POST request,...

Adobe Commerce License Issues Vulnerability (CNVD-2025-08776)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an authorization issue vulnerability that stems from improper authorization, and no detailed vulnerability details are available at...

Huawei HarmonyOS buffer overflow vulnerability (CNVD-2025-10519)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a buffer overflow vulnerability that can be exploited by attackers to affect availability...

SAP KMC WPC Information Disclosure Vulnerability

SAP KMC WPC is a combination of enterprise content management and web publishing components from SAP. An information disclosure vulnerability exists in SAP KMC WPC, which can be exploited by an attacker to retrieve a user name via a simple parameter query, resulting in the disclosure of sensitive...

SAP NetWeaver Server ABAP Authorization Issues Vulnerability

SAP NetWeaver Server ABAP is an application server from SAP, Germany. SAP NetWeaver Server ABAP suffers from an authorization issue vulnerability that stems from a lack of authorization checking in the virus scanning interface, which could be exploited by an attacker to access sensitive data...

Rockwell Automation Arena Local Code Execution Vulnerability (CNVD-2025-21434)

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

Rockwell Automation Arena Local Code Execution Vulnerability

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

PCMan FTP Server SITE CHMOD Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from SITE CHMOD Command Handler failing to properly validate the length and size of the input data, which can be exploited by an attacker to cause a denial of...

Adobe Commerce Unauthorized Access Vulnerability

Adobe Commerce is a leading global digital commerce solution for merchants and brands. An unauthorized access vulnerability exists in Adobe Commerce. The vulnerability stems from inadequate protection of access to sensitive credential information, which allows an attacker with elevated privileges...

PCMan FTP Server SYST Command Handling Component Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the SYST command processing component failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a deni...

Dell Client Platform BIOS Buffer Overflow Vulnerability

Dell Client Platform BIOS is a client platform BIOS from Dell USA. The Dell Client Platform BIOS is vulnerable to a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15527)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a security issue that can be exploited by attackers to affect availability...

Adobe Media Encoder Out-of-Bounds Write Vulnerability (CNVD-2025-08778)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. Adobe Media Encoder suffers from an out-of-bounds write vulnerability that stems from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code...

Adobe Animate Out-of-Bounds Read Vulnerability (CNVD-2025-07804)

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

PCMan FTP Server DELETE Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source FTP software package . PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the DELETE Command Handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15557)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an SVG parsing module exception capture failure, and can be exploited by an attacker to...

Fortinet FortiSwitch Authorization Issues Vulnerability

Fortinet FortiSwitch is a network switch management tool from Fiat Fortinet. Fortinet FortiSwitch suffers from an authorization issue vulnerability that originates from an unauthenticated password change, which can be exploited by an attacker to cause the administrator password to be tampered wit...

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2025-07801)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An out-of-bounds read vulnerability exists in Adobe After Effects version...

Siemens SENTRON 7KT PAC1260 Data Manager Trust Management Issue Vulnerability

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. A trust management issue vulnerability exists in the Siemens SENTRON 7KT PAC1260 Data Manager, which stems from the presence of hard-coded credentials that can be exploited by an...

Adobe XMP Toolkit Buffer Overflow Vulnerability (CNVD-2025-08781)

Adobe XMP Toolkit is a toolkit from the American company Audobee Adobe. Used to integrate Xmp functionality into a product or solution. Adobe XMP Toolkit suffers from a buffer overflow vulnerability that originates from an out-of-bounds read, which can be exploited by an attacker to cause a...

Unspecified Vulnerability in Siemens SENTRON 7KT PAC1260 Data Manager (CNVD-2025-07815)

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. A security vulnerability exists in the Siemens SENTRON 7KT PAC1260 Data Manager that stems from a web interface of the affected device that allows the login password to be changed...

Ivanti Endpoint Manager Cross-Site Scripting Vulnerability

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

SAP Netweaver Unauthorized Access Vulnerability

SAP NetWeaver is SAP's integrated technology platform. An unauthorized access vulnerability exists in SAP Netweaver that stems from an authorization check bypass and can be exploited by an attacker to gain unauthorized access to ABAP code...

Siemens SENTRON 7KT PAC1260 Data Manager OS Command Injection Vulnerability

Siemens SENTRON 7KT PAC1260 Data Manager is a device for power monitoring and energy management from Siemens Germany. The Siemens SENTRON 7KT PAC1260 Data Manager suffers from an OS command injection vulnerability that stems from not cleaning up the input parameter of a specific GET request, whic...

Fortinet FortiIsolator Operating System Command Injection Vulnerability

Fortinet FortiIsolator is a Fortinet application that provides remote security isolation for browsers. The application adds additional advanced threat protection capabilities to the Fortinet Security Fabric and protects business-critical data from sophisticated threats on the Web. Content and fil...