Adobe ColdFusion Input Validation Error Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. An input validation error vulnerability exists in Adobe ColdFusion that stems from a failure to...

Adobe ColdFusion License Issue Vulnerability (CNVD-2025-09272)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an authorization issue vulnerability, the vulnerability stems from the failure to...

Adobe After Effects Out-of-Bounds Write Vulnerability (CNVD-2025-12335)

Adobe After Effects is a professional software for creating motion graphics, visual effects and moving images. An out-of-bounds write vulnerability exists in Adobe After Effects. The vulnerability stems from the program failing to properly handle memory boundaries, resulting in data being written...

Adobe Framemaker Null Pointer Dereference Vulnerability

Adobe Framemaker is a page layout software for writing and editing large or complex documents. A null pointer dereference vulnerability exists in Adobe Framemaker. The vulnerability originates from a null pointer dereference operation. An attacker could exploit this vulnerability to crash the...

Adobe Photoshop Desktops Heap Buffer Overflow Vulnerability

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. A heap buffer overflow vulnerability exists in Adobe Photoshop Desktops. The vulnerability is due to a failure to perform strict checksums on memory...

Improper Access Control Vulnerability in Tenda FH1202 (CNVD-2025-07508)

The Tenda FH1202 is a wireless router from China's Tenda. An improper access control vulnerability exists in the Tenda FH1202. The vulnerability stems from an improper access control issue in the /goform/qossetting file, which could lead to unauthorized access or modification. An attacker could u...

Comfast CF-616AC V2 of Shenzhen Sihai Zonglian Network Technology Co., Ltd. suffers from logic flaw vulnerability

Comfast CF-616AC V2 is a wireless router. Comfast CF-616AC V2 has a logic flaw vulnerability that can be exploited by an attacker to cause a denial of service...

Adobe Media Encoder Heap Buffer Overflow Vulnerability (CNVD-2025-12336)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. A security vulnerability exists in Adobe Media Encoder version 25.1 and versions 24.6.4 and earlier, which stems from a heap buffer overflow vulnerability that could lead to arbitrary code...

TOTOLINK X18 Code Execution Vulnerability

The TOTOLINK X18 is a gigabit router from China's Gion Electronics. A code execution vulnerability exists in the TOTOLINK X18. The vulnerability stems from sub410E54 in cstecgi.cgi and can be exploited by an attacker to execute arbitrary commands...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10874)

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from an unknown feature in the EPSV command processor. No detailed vulnerability details are provided at this time...

Unauthorized Access Vulnerability in H3C M60 of Xinhua San Technologies Co.

H3C M60 is a new generation of enterprise-grade, high-performance wireless AP manager from Xinhua San. An unauthorized access vulnerability exists in the H3C M60 of Xinhua San Technologies, which can be exploited by attackers to obtain sensitive information...

Tenda FH1202 Improper Access Control Vulnerability

The Tenda FH1202 is a wireless router manufactured by Tenda in China. An improper access control vulnerability exists in the Tenda FH1202. The vulnerability stems from improper access control due to the handling of the file /goform/wrlwpsset. An attacker can exploit this vulnerability to launch a...

AC23 Denial of Service Vulnerability in Shenzhen Jixiang Tengda Technology Co.

The AC23 is a wireless router that provides high-speed wireless network connectivity. A denial of service vulnerability exists in the AC23 of Shenzhen Jixiang Tengda Technology Co. The vulnerability stems from improper handling of the getuid parameter by the /goform/VerAPIMant component. An...

TOTOLINK A6000R Command Injection Vulnerability

The TOTOLINK A6000R is a high performance wireless router. A command injection vulnerability exists in TOTOLINK A6000R. The vulnerability stems from the mishandling of the apclicancelwps function, and no detailed vulnerability details are provided at this time...

Tenda AC10 Stack Overflow Vulnerability

The Tenda AC10 is a home wireless router that provides wireless network connectivity and management. A stack overflow vulnerability exists in the Tenda AC10. The vulnerability stems from the improper handling of the list parameter in the ShutdownSetAdd function in the /goform/ShutdownSetAdd file...

SQL Injection Vulnerability in Family Service Management Cloud Platform of Wuhan Jin Tongfang Technology Co.

Wuhan Jin Tongfang Technology Co., Ltd. is a company that provides informatization solutions for the mother and child service industry. There is a SQL injection vulnerability in the family service management cloud platform of Wuhan Golden Tongfang Technology Co. Ltd, which can be exploited by...

SQL injection vulnerability in CRM of Zhengzhou Jane Xin Software Technology Co.

Ltd. is a professional enterprise management platform and ecological enterprise service provider in China, focusing on marketing, consulting, research, implementation, training and service of enterprise-level management software CRM/HRM/OA/ERP, etc., and is committed to providing one-stop digital...

Kentico Xperience cross-site scripting vulnerability (CNVD-2026-05133)

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a cross-site scripting vulnerability due to .zip files being processed through TryZipProviderSafe, which can be exploited by an attacker to cause the creation of files with other extensions...

Dell PowerProtect Data Domain Access Control Vulnerability

Dell PowerProtect Data Domain is a data protection storage appliance from Dell Technologies, built on the Data Domain platform and designed for building a resilient foundation for networks and enabling rapid data recovery. An access control vulnerability exists in Dell PowerProtect Data Domain,...

Microsoft Office Elevation of Privilege Vulnerability (CNVD-2025-10662)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. Microsoft Office has an elevation of privilege vulnerability that can be exploited by an attacker to elevat...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2025-24454)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Bus Pass Management System view-pass-detail.php File SQL Injection Vulnerability

Bus Pass Management System is a bus pass management system. Bus Pass Management System suffers from a SQL injection vulnerability that originates from a missing validation of an externally entered SQL statement in the viewid parameter of the view-pass-detail.php file. An attacker can exploit this...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-10608)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Windows DWM Core Library Elevation of Privilege Vulnerability (CNVD-2025-07782)

The Microsoft Windows DWM Core Library is a core library in the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which can be exploited by an attacker to elevate privileges...

Microsoft Edge for iOS Spoofing Vulnerability (CNVD-2025-23060)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge for iOS has a spoofing vulnerability that can be exploited by attackers to conduct content spoofing attacks...

Microsoft Office Code Execution Vulnerability (CNVD-2025-10659)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...

Google Chrome Security Bypass Vulnerability (CNVD-2025-10927)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that originates from an improper implementation in Custom Tabs. An attacker can exploit the vulnerability to bypass security restrictions...

College Management System File Upload Vulnerability

College Management System is a simple program. It is used to keep track of students, teachers, subjects, schedules and all things related to college. A file upload vulnerability exists in College Management System version 1.0, which stems from the lack of valid validation of the uploaded file by...

e-Diary Management System registration.php File SQL Injection Vulnerability

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from a missing validation of an externally typed SQL statement in the emailid parameter of the registration.php file. An attacker can...

PyTorch torch.lstm_cell function buffer overflow vulnerability

PyTorch is a Python package open-sourced by PyTorch. PyTorch has a buffer overflow vulnerability that stems from the failure of the function torch.lstmcell to properly validate the length size of the input data, which can be exploited by an attacker to execute arbitrary code on the system or caus...

Patient Record Management System dental_not.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from the validation of externally entered SQL statements that are missing from parameter itrno in the dentalnot.php file. An attacker...

D-Link DI-8100 ipsec_net_asp function buffer overflow vulnerability

The D-Link DI-8100 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 16.07.26A1, which originates from the failure of the remoteip parameter in the ipsecnetasp function t...

Google Chrome Security Bypass Vulnerability (CNVD-2025-10925)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that originates from an improper implementation in Autofill. An attacker can exploit the vulnerability to bypass security restrictions...

Microsoft Windows Hello Security Feature Bypass Vulnerability (CNVD-2025-07780)

Microsoft Windows Hello is a more personalized and secure way to sign in to your Windows device. A security feature bypass vulnerability exists in Microsoft Windows Hello, which can be exploited by an attacker to bypass certain features...

PyTorch torch.nn.utils.rnn.pad_packed_sequence function buffer overflow vulnerability

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a buffer overflow vulnerability that stems from the failure of the function torch.nn.utils.rnn.padpackedsequence to properly validate the length size of input data, which can be exploited by an attacker to execute arbitrary...

Microsoft Windows Telephony Service Remote Code Execution Vulnerability (CNVD-2025-07784)

Microsoft Windows Telephony Service is based on IBinder to provide phone status and telephony services. A remote code execution vulnerability exists in Microsoft Windows Telephony Service, which can be exploited by an attacker to execute code on the target host...

e-Diary Management System add-notes.php File SQL Injection Vulnerability

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from a missing validation of an externally entered SQL statement in the Category parameter of the add-notes.php file. An attacker can...

Microsoft Windows DWM Core Library Elevation of Privilege Vulnerability (CNVD-2025-07781)

The Microsoft Windows DWM Core Library is a core library in the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which can be exploited by an attacker to elevate privileges...

e-Diary Management System password-recovery.php File SQL Injection Vulnerability

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the parameter username/contactno of the password-recovery.php file. An...

e-Diary Management System search-result.php File SQL Injection Vulnerability

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the searchdata parameter of the search-result.php file. An attacker ca...

Patient Record Management System birthing_print.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from the validation of externally entered SQL statements that is missing from the parameter itrno in the birthingprint.php file. The...

Hospital Management System doctor-specilization.php File SQL Injection Vulnerability

Hospital Management System a hospital management system. The Hospital Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the parameter doctorspecilization of the file /admin/doctor-specilization.php. An...

Patient Record Management System birthing_form.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from a missing validation of an externally entered SQL statement in the parameter birthid of the /birthingform.php file...

Restaurant Table Booking System add-subadmin.php File SQL Injection Vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from a missing validation of an externally entered SQL statement in the parameter fullname of the add-subadmin.php file. An attacker...

Microsoft Edge for iOS Spoofing Vulnerability (CNVD-2025-23061)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge for iOS has a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

Google Chrome Security Bypass Vulnerability (CNVD-2025-10926)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that originates from an improper implementation in Downloads. An attacker can exploit the vulnerability to bypass security restrictions...

e-Diary Management System view-note.php File SQL Injection Vulnerability

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the parameter mark of the view-note.php file. An attacker can exploit...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CNVD-2025-23058)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a remote code execution vulnerability that is caused by a type confusion flaw. An attacker could exploit the vulnerability to execute arbitrary...

Patient Record Management System birthing_record.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from the validation of externally entered SQL statements that are missing from parameter itrno in the birthingrecord.php file. An...

phpIPAM cross-site scripting vulnerability (CNVD-2025-06929)

phpIPAM is phpIPAM open source set of open source PHP and MySQL based IP address management application IPAM. phpIPAM suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...