TOTOLINK EX1800T setDmzCfg OS Command Injection Vulnerability

TOTOLINK EX1800T is a wireless repeater from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from an OS command injection vulnerability that originates from the setDmzCfg contained in /cgi-bin/cstecgi.cgi, and no details of the vulnerability are provided at this time...

Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability

Cisco TelePresence Management Suite is a video server management program developed by Cisco. Cisco TelePresence Management Suite suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject malicious script or HTML code, which can be used to obtain sensitive...

Tenda AC15 Buffer Overflow Vulnerability (CNVD-2025-09165)

The Tenda AC15 is a wireless router from the Chinese company Tenda. The Tenda AC15 suffers from a buffer overflow vulnerability that stems from improper handling of the parameter src, no details of the vulnerability are provided at this time...

Samsung Notes parses bmp out-of-bounds write vulnerability

Samsung Notes is a simple and easy to use cell phone notepad software, support for all Samsung models to install and use. Samsung Notes suffers from an out-of-bounds write vulnerability, which originates from bmp image parsing, no details of the vulnerability are available at this time...

QNAP QTS and QNAP QuTS hero double release vulnerability

QNAP QTS is a Linux-based NAS operating system launched by QNAP, providing an intuitive and easy-to-use graphical interface and powerful data management features. QNAP QuTS hero is an operating system launched by QNAP specifically for enterprise-level applications, adopting the ZFS file system,...

Google Chrome Browser UI Incorrectly Implemented Vulnerability

Google Chrome is a WEB browser developed by Google Inc. An incorrect implementation vulnerability exists in the Google Chrome Browser UI. An attacker can exploit this vulnerability to submit a special web request to perform UI spoofing...

SQL Injection Vulnerability in U8 Cloud of UFIDA Network Technology Co.

U8 Cloud is a digital platform for enterprises to go to the cloud, integrating transactions, services and management into a total ERP solution. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to gain access to sensitive database information...

TOTOLINK EX1800T setRebootScheCfg OS Command Injection Vulnerability

TOTOLINK EX1800T is a wireless repeater from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from an OS command injection vulnerability that originates from the setRebootScheCfg contained in /cgi-bin/cstecgi.cgi, and no details of the vulnerability are provided at this time...

Google Chrome Buffer Overflow Vulnerability (CNVD-2025-05393)

Google Chrome is a WEB browser developed by Google Inc. A security vulnerability exists in Google Chrome, which can be exploited by remote attackers to submit a special Web request that induces the user to parse and can be used in an application context to execute arbitrary code...

TOTOLINK EX1800T setWiFiExtenderConfig OS Command Injection Vulnerability

TOTOLINK EX1800T is a wireless repeater from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from an OS command injection vulnerability, which stems from the incorrect operation of the function setWiFiExtenderConfig parameter apcliKey and key, and no detailed vulnerability details...

Google Chrome Buffer Overflow Vulnerability (CNVD-2025-05392)

Google Chrome is a WEB browser developed by Google Inc. A security vulnerability exists in Google Chrome, which can be exploited by remote attackers to submit a special Web request that can be tricked into being parsed by the user, which can crash the application or execute arbitrary code in the...

Google Chrome Media Stream Incorrectly Implemented Vulnerability

Google Chrome is a WEB browser developed by Google Inc. An incorrectly implemented vulnerability exists in Google Chrome Media Stream, which can be exploited by attackers to obtain sensitive information...

Google Chrome Profiles Memory Misreference Code Execution Vulnerability

Google Chrome is a WEB browser developed by Google Inc. A memory misreference code execution vulnerability exists in Google Chrome Profiles, which can be exploited by an attacker to submit a special Web request and trick the user into parsing it, which can crash the application or execute arbitra...

Google Chrome Path Traversal Vulnerability

Google Chrome is a WEB browser developed by Google Inc. Google Chrome suffers from a path traversal vulnerability that is caused by an error in DevTools. An attacker can exploit the vulnerability to bypass file access restrictions...

Student Record System password-recovery.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from an SQL injection vulnerability that originates from an incorrect manipulation of the parameter emailid in the password-recovery.php file, which can lead to SQL injection. An attacker can use this vulnerability to...

D-Link DAR-7000 Command Injection Vulnerability

The D-Link DAR-7000 is an Internet Behavior Management and Auditing Gateway device that provides Internet behavior management and auditing capabilities. The D-Link DAR-7000 suffers from a command injection vulnerability that stems from the ethname parameter of the getipaddrdetails function in the...

Ubiquiti UniFi Protect Cameras Improper Certificate Validation Vulnerability

Ubiquiti UniFi Protect Cameras is a line of security cameras from Ubiquiti Networks that support the UniFi Protect platform for centralized management with remote access, smart monitoring and more. Ubiquiti UniFi Protect Cameras suffers from a Certificate Validation Improperity vulnerability that...

Tenda AC8 Buffer Overflow Vulnerability (CNVD-2025-09166)

Tenda AC8 is a wireless router from Tenda, a Chinese company. Tenda AC8 suffers from a buffer overflow vulnerability, which originates from the improper handling of the parameter list in the /goform/SetIpMacBind file, and can be exploited by an attacker to remotely launch an attack and gain contr...

Esri ArcGIS Server Cross-Site Scripting Vulnerability (CNVD-2025-05076)

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by an attacker to create a specially crafted link that, when clicked, m...

Human Metapneumovirus Testing Management System /login.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. Human Metapneumovirus Testing Management System is vulnerable to a SQL injection vulnerability that affects the username parameter in the /login.php file. No details of the vulnerability are...

GNU GRUB Buffer Overflow Vulnerability

GNU GRUB is a Linux system boot program from the GNU community. GNU GRUB suffers from a buffer overflow vulnerability that originates from a heap-based buffer overflow issue in the udf module containing a grubudfreadblock. An attacker could exploit the vulnerability to corrupt critical data and...

Nipah virus Testing Management System check_availability.php File SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the checkavailability.php file. An attacker can exploit...

Esri ArcGIS Server Cross-Site Scripting Vulnerability (CNVD-2025-05056)

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by an attacker to create a specially crafted link that, when clicked, m...

IBM Cognos Controller Weak Password Vulnerability

IBM Cognos Controller is a corporate performance management CPM software for financial consolidation, reporting and analysis. A weak password vulnerability exists in IBM Cognos Controller versions 11.0.0 through 11.1.0, which stems from the fact that the system does not require users to set stron...

Ubiquiti UniFi Protect Cameras Post-Release Reuse Vulnerability

Ubiquiti UniFi Protect Cameras is a line of security cameras from Ubiquiti Networks that support the UniFi Protect platform for centralized management with remote access, smart monitoring and more. \ Ubiquiti UniFi Protect Cameras suffers from a post-release reuse vulnerability that can be...

Esri ArcGIS Server Cross-Site Scripting Vulnerability (CNVD-2025-05072)

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A security vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by an attacker to create specially crafted links that, when clicked, may execute...

Esri ArcGIS Server Cross-Site Scripting Vulnerability (CNVD-2025-05055)

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by an attacker to create a specially crafted link that, when clicked, m...

D-Link DAP-1320 Stack Buffer Overflow Vulnerability

The D-Link DAP-1320 is a wireless signal extender from China-based AUO D-Link. The D-Link DAP-1320 suffers from a stack buffer overflow vulnerability that originates from the function replacespecialchar in file /storagein.pd-XXXXXX.An attacker can exploit this vulnerability to cause a program cra...

Esri ArcGIS Server Cross-Site Scripting Vulnerability (CNVD-2025-05057)

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by an attacker to create a specially crafted link that, when clicked, m...

GNU GRUB2 Buffer Overflow Vulnerability

GNU GRUB2 is an open source bootloader used to load the operating system kernel when the computer boots. GNU GRUB2 suffers from a buffer overflow vulnerability that originates from an integer overflow when reading data from the squash4 file system. An attacker can exploit this vulnerability to...

Esri ArcGIS Server Cross-Site Scripting Vulnerability (CNVD-2025-05060)

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by an attacker to create a specially crafted link that, when clicked, m...

SQL Injection Vulnerability in UFIDA U8CRM at UFIDA Network Technology Co.

UFIDA U8CRM is a professional business management software. A SQL injection vulnerability exists in UFIDA U8CRM, which can be exploited by attackers to obtain sensitive information from the database...

Tenda AC6 Buffer Overflow Vulnerability (CNVD-2025-09222)

Tenda AC6 is a dual-band wireless router from China's Tenda Tenda in 2016. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from some unknown features of /goform/WifiExtraSet, and can be exploited by an attacker to execute arbitrary code by manipulating the parameter...

Online Shopping Portal product-details.php file SQL Injection Vulnerability

Online Shopping Portal is an online store. Online Shopping Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the product-details.php file. An attacker can exploit this vulnerability to execute illegal SQL commands to ste...

NETGEAR DGN2200 Privilege Issue Vulnerability

The NETGEAR DGN2200 is a wireless router from NETGEAR. The NETGEAR DGN2200 is vulnerable to a privilege issue. An attacker can exploit the vulnerability by adding "?x=1.gif" to the requested URL to be recognized as authenticated...

Tenda AC7 Stack Overflow Vulnerability (CNVD-2025-05237)

The Tenda AC7 is a wireless router manufactured by Tenda. A stack overflow vulnerability exists in the formSetFirewallCfg function of the /goform/SetFirewallCfg file in Tenda AC7 15.03.06.44 and earlier versions when handling the firewallEn parameter, which stems from the program failing to check...

TOTOlink A3002R static_gw parameter buffer overflow vulnerability

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A3002R version V1.1.1-B20200824.0128, which stems from the staticgw parameter failing to correctly validate the length and size of the input data, and can be exploit...

TOTOlink A3002R static_ipv6 parameter buffer overflow vulnerability

The TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOlink A3002R version V1.1.1-B20200824.0128, which stems from the staticipv6 parameter failing to correctly validate the length and size of the input data, and can be...

Esri ArcGIS Server Cross-Site Scripting Vulnerability (CNVD-2025-05073)

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by an attacker to create a specially crafted link that, when clicked, m...

Tenda TX3 Router Buffer Overflow Vulnerability

Tenda TX3 is a wireless router from Tenda that provides internet connectivity. A buffer overflow vulnerability exists in Tenda TX3 router version 16.03.13.11multi, which originates from improper handling of the deviceList parameter in the /goform/setMacFilterCfg file. No detailed vulnerability...

News Portal login.php File SQL Injection Vulnerability

News Portal is a news portal. News Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the login.php file. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data...

Esri ArcGIS Server Path Traversal Vulnerability

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A path traversal vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which stems from the program failing to properly filter for special elements in the path of a resour...

Ubiquiti UniFi Protect Application Authentication Bypass Vulnerability

The Ubiquiti UniFi Protect Application is an enterprise-grade security monitoring platform that supports both home and business users. Ubiquiti UniFi Protect Application has an authentication bypass vulnerability hole that can be exploited by an attacker to take control of a UniFiProtect camera...

Ubiquiti UniFi Protect Cameras Firmware Update Insufficient Authentication Vulnerability

Ubiquiti UniFi Protect Cameras is a line of security cameras from Ubiquiti Networks that support the UniFi Protect platform for centralized management with remote access, smart monitoring and more. Ubiquiti UniFi Protect Cameras suffers from a Firmware Update Validation Insufficiency vulnerabilit...

Esri ArcGIS Server Cross-Site Scripting Vulnerability (CNVD-2025-05074)

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by an attacker to create a specially crafted link that, when clicked, m...

Esri ArcGIS Server Cross-Site Scripting Vulnerability (CNVD-2025-05064)

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by an attacker to create a specially crafted link that, when clicked, m...

D-Link DAP-1320 Stack Buffer Overflow Vulnerability (CNVD-2025-13521)

The D-Link DAP-1320 is a wireless signal extender from China-based AUO D-Link. The D-Link DAP-1320 suffers from a stack buffer overflow vulnerability that originates from the function setwsaction in the file /dws/api/. An attacker can exploit this vulnerability to cause a program crash or even...

Esri ArcGIS Server Catalog Traversal Vulnerability

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A directory traversal vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which can be exploited by a remote authenticated attacker to access files outside the file syst...

Apache StreamPipes elevation of privilege vulnerability (CNVD-2025-05698)

Apache StreamPipes is an open source self-service industrial IoT toolkit that enables users to connect, analyze and explore IIoT data streams. A security vulnerability exists in Apache StreamPipes version 0.95.1 and earlier, which stems from a lack of filtering and sloppy validation of resource...

Tenda AC8 Buffer Overflow Vulnerability (CNVD-2025-09167)

Tenda AC8 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC8, which stems from a buffer overflow vulnerability in the shareSpeed parameter of the sub47D878 function, which can be exploited by an attacker to execute arbitrary code...