131446 matches found
Blind SQL Injection Vulnerability in ChurchCRM FRBidSheets.php Page
ChurchCRM is an open source church management system. ChurchCRM suffers from a blind SQL injection vulnerability that stems from a time-based SQL blind injection vulnerability in the CurrentFundraiser GET parameter of the FRBidSheets.php page. An attacker can exploit this vulnerability to perform...
Google Android heap buffer overflow vulnerability (CNVD-2025-15179)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a heap buffer overflow vulnerability, which is caused due to a flaw in a system component. An attacker can exploit the vulnerability to execute arbitrary code on the system...
SAP Netweaver Application Server ABAP Information Disclosure Vulnerability
SAP Netweaver Application Server ABAP is a core component of the SAP system, responsible for business processing and data interaction. An information disclosure vulnerability exists in SAP Netweaver Application Server ABAP, which stems from failure to perform required authorization checks and can...
Tenda RX3 Cache Overflow Vulnerability (CNVD-2025-08318)
Tenda RX3 is a dual-band WiFi home wireless router from China's Tenda. A buffer overflow vulnerability exists in Tenda RX3. The vulnerability originates from a buffer overflow in the schedStartTime and schedEndTime parameters in /goform/saveParentControlInfo, which can lead to a denial of service...
SQL Injection Vulnerability in DSS of Zhejiang Dahua Technology Co.
Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the DSS of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information fro...
Cisco IOS XR Denial of Service Vulnerability (CNVD-2025-15800)
Cisco IOS XR is an operating system developed by the American company Cisco for its network devices. A denial of service vulnerability exists in Cisco IOS XR. The vulnerability stems from the incorrect handling of malformed IKEv2 packets. An attacker could exploit the vulnerability to cause a...
Siemens SCALANCE LPE9403 Elevation of Privilege Vulnerability
Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. An elevation of privilege vulnerability exists in the Siemens SCALANCE LPE9403, which can be exploited by an attacker to...
Siemens SCALANCE LPE9403 Operating System Command Injection Vulnerability
Siemens SCALANCE LPE9403 is a local processing engine for industrial field data processing from Siemens. It is used to capture, collect and pre-process industrial field data. The SCALANCE LPE9403 6GK5998-3GS00-2AC2 suffers from an operating system command injection vulnerability that originates...
Tenda AC9 formAdvSetMacMtuWan function wanSpeed parameter buffer overflow vulnerability
Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a buffer overflow vulnerability that arises from the wanSpeed parameter of the formAdvSetMacMtuWan function failing to properly validate the length of the input data, which can be exploited by an attacker to...
Online Class and Exam Scheduling System program.php file cross-site scripting vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters id, code, and name ...
Human Metapneumovirus Testing Management System /check_availability.php File SQL Injection Vulnerability
Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter...
Dell SmartFabric OS10 Command Injection Vulnerability (CNVD-2025-15191)
Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. Dell SmartFabric OS10 suffers from a command injection...
Apartment Visitors Management System visname Parameter SQL Injection Vulnerability
Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter visname. An attacker can exploit this...
Online Class and Exam Scheduling System room.php File Cross-Site Scripting Vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters id and rome of...
TOTOLINK EX1800T setPasswordCfg function buffer overflow vulnerability
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from a buffer overflow vulnerability that stems from the setPasswordCfg function failing to properly validate the length and size of the input data, which can be exploited by an...
TOTOLINK EX1800T setWiFiExtenderConfig function buffer overflow vulnerability
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from a buffer overflow vulnerability that originates from the setWiFiExtenderConfig function failing to correctly validate the length and size of the input data, which can be...
Dell SmartFabric OS10 Mismanagement of Privileges Vulnerability
Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. A mismanagement of privileges vulnerability exists in Dell...
Company Visitor Management System /index.php File SQL Injection Vulnerability
Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter username in the /index.php file of the component Sign In against an externally-entered SQL...
Tenda AC6 formWifiWpsOOB function buffer overflow vulnerability
The Tenda AC6 is a wireless router from the Chinese company Tenda. Tenda AC6 v15.03.05.16 suffers from a buffer overflow vulnerability, which stems from the formWifiWpsOOB function failing to correctly validate the length of the input data, which can be exploited by an attacker to execute arbitra...
Online Class and Exam Scheduling System profile.php file cross-site scripting vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. A cross-site scripting vulnerability exists in Online Class and Exam Scheduling System, which stems from the lack of effective filtering and escaping of user-supplied data in the parameters memberfirst and...
Tenda AC9 formAdvSetMacMtuWan function wanMTU parameter buffer overflow vulnerability
Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a buffer overflow vulnerability that originates from the wanMTU parameter of the formAdvSetMacMtuWan function failing to properly validate the length of the input data, which can be exploited by an attacker t...
Tenda AC9 formAdvSetMacMtuWan Buffer Overflow Vulnerability
Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC9 formAdvSetMacMtuWan, which originates from the mac parameter of the formAdvSetMacMtuWan function failing to correctly validate the length and size of the input data, and can be...
Modern Bag login.php File SQL Injection Vulnerability
Modern Bag is an online management system. Modern Bag suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameters userEmail/userPassword in the /login.php file. An attacker can exploit this vulnerability to execute...
Tenda AC6 fromAddressNat function buffer overflow vulnerability
The Tenda AC6 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC6 v15.03.05.16, which is caused by the fromAddressNat function failing to correctly validate the length of input data, and can be exploited by an attacker to execute arbitrary code...
Doctor Appointment Management System /doctor/search.php File SQL Injection Vulnerability
Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the searchdata parameter of file /doctor/search.php. An...
Tenda AC9 formWifiWpsOOB function buffer overflow vulnerability
Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 suffers from a buffer overflow vulnerability that stems from the formWifiWpsOOB function failing to properly validate the length size of the input data, no details of the vulnerability are provided at this time...
Online Class and Exam Scheduling System department.php file cross-site scripting vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters id, code, and name ...
D-Link DIR-823G License Issue Vulnerability
The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G suffers from an authorization issue vulnerability that stems from improper authorization and can be exploited by an attacker to cause access control to sensitive content...
DELL SmartFabric OS10 Default Password Vulnerability
DELL SmartFabric OS10 Software is a software-defined network operating system from Dell Networks, based on Linux and open source technologies, and is primarily used to enable flexible management and automated deployment of data center network resources. DELL SmartFabric OS10 suffers from a defaul...
Online Class and Exam Scheduling System salut_del.php File SQL Injection Vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that originates from the parameter id of /pages/salutdel.php that lacks validation of externally entered SQL statements. An...
Dell SmartFabric OS10 Licensing Issues Vulnerability
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from an authorization issue vulnerability that stems from improper privilege assignment, which can be exploited by an attacker to cause elevation of privilege...
Human Metapneumovirus Testing Management System /profile.php File SQL Injection Vulnerability
Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter...
Online Class and Exam Scheduling System class.php file cross-site scripting vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters id and cys in...
DELL SmartFabric OS10 Hardcoded Password Vulnerability
DELL SmartFabric OS10 Software is a software-defined network operating system from Dell Networks, based on Linux and open source technologies, and is primarily used to enable flexible management and automated deployment of data center network resources. DELL SmartFabric OS10 suffers from a...
Dell SmartFabric OS10 Server-Side Request Forgery Vulnerability
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from a server-side request forgery vulnerability, which stems from the server not implementing an adequate authentication mechanism to confirm the origin of the request, and can be...
Dell SmartFabric OS10 Command Injection Vulnerability (CNVD-2025-15192)
Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. Dell SmartFabric OS10 suffers from a command injection...
Dell SmartFabric OS10 Command Injection Vulnerability
Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. A command injection vulnerability exists in Dell SmartFabric...
Human Metapneumovirus Testing Management System /password-recovery.php File SQL Injection Vulnerability
Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. A SQL injection vulnerability exists in the Human Metapneumovirus Testing Management System due to a lack of validation of an externally-entered SQL statement in the parameter username in the...
WordPress WP JobHunt plugin wp_ajax_google_api_login_callback function authentication error vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP JobHunt...
WordPress ShareThis Dashboard for Google Analytics plugin authorization issue vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...
Tenda AC6 formSetSpeedWan function buffer overflow vulnerability
The Tenda AC6 is a wireless router from the Chinese company Tenda. Tenda AC6 v15.03.05.16 suffers from a buffer overflow vulnerability, which stems from the formSetSpeedWan function failing to correctly validate the length of the input data, which can be exploited by an attacker to execute...
Apartment Visitors Management System username parameter SQL Injection Vulnerability
Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement for the parameter username. An attacker can exploit this...
Curfew e-Pass Management System /admin/search-pass.php File SQL Injection Vulnerability
Curfew e-Pass Management System is an electronic pass management system. The Curfew e-Pass Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /admin/search-pass.php file parameter searchdata. An...
Dell SmartFabric OS10 Command Injection Vulnerability (CNVD-2025-15193)
Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. Dell SmartFabric OS10 suffers from a command injection...
Tenda AC9 formAdvSetMacMtuWan function cloneType parameter buffer overflow vulnerability
Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a buffer overflow vulnerability that arises from the cloneType parameter of the formAdvSetMacMtuWan function failing to properly validate the length of the input data, which can be exploited by an attacker to...
Dell SmartFabric OS10 Command Injection Vulnerability
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from a command injection vulnerability that originates from improper neutralization of special elements in a command, which can be exploited by an attacker to cause a command to be...
Online Class and Exam Scheduling System exam_save.php File SQL Injection Vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameters member and first of...
D-Link DIR-823G License Issue Vulnerability
The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G suffers from an authorization issue vulnerability that stems from improper authorization, no details of the vulnerability are provided at this time...
Online Class and Exam Scheduling System activate.php File SQL Injection Vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter id of /pages/activate.php. An...
Dell SmartFabric OS10 Elevation of Privilege Vulnerability
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. A security vulnerability exists in Dell SmartFabric OS10 that originates from an unwanted privilege execution that can be exploited by an attacker to cause an elevation of privilege...