Adobe Illustrator Out-of-Bounds Read Vulnerability (CNVD-2025-05687)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Illustrator, which can be exploited by attackers to obtain sensitive information...

Adobe Illustrator Out-of-Bounds Read Vulnerability (CNVD-2025-05689)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Illustrator, which can be exploited by attackers to obtain sensitive information...

Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2025-12338)

Adobe Acrobat is the United States of America Odo than Adobe company's set of software suite used to create, edit, view and print PDF Portable Document Format files. A security vulnerability exists in Adobe Acrobat, which stems from an out-of-bounds read issue that can be exploited by an attacker...

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2025-05247)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2025-16321)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a buffer error vulnerability that can be exploited by an attacker to cause arbitrary code execution...

ZTE GoldenDB Unauthorized Access Vulnerability (CNVD-2025-10902)

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An unauthorized access vulnerability exists in ZTE GoldenDB, which stems...

Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2025-05688)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...

ZTE GoldenDB Unauthorized Access Vulnerability

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An unauthorized access vulnerability exists in ZTE GoldenDB, which stems...

Adobe InDesign Heap Buffer Overflow Vulnerability (CNVD-2025-05246)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Fortinet FortiSandbox Operating System Command Injection Vulnerability

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. Fortinet FortiSandbox suffers from an operating system command injection...

Adobe Illustrator Null Pointer Dereference Vulnerability (CNVD-2025-05685)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A null pointer dereference vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to cause a denial of service...

Adobe Substance 3D Designer Out-of-Bounds Read Vulnerability (CNVD-2025-05205)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Designer version 1.15.0 and prior versions, which can be exploited by attackers to cause a sensitive memory leak...

Fortinet FortiADC Cross-Site Scripting Vulnerability (CNVD-2025-27463)

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. The Fortinet FortiADC suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute...

Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05199)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A heap buffer overflow vulnerability exists in Adobe Substance 3D Designer 14.1 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

WordPress Responsive Google Map plugin suffers from an unspecified vulnerability (CNVD-2025-05453)

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2025-16322)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A buffer overflow vulnerability exists in Adobe Acrobat Reader 24.001.30225, 20.005.30748, 25.001.20428 and earlier versions, which originates from an out-of-bounds...

Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-05212)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-05213)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2025-16323)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A buffer overflow vulnerability exists in Adobe Acrobat Reader 24.001.30225, 20.005.30748, 25.001.20428 and earlier versions, which stems from uninitialized pointer...

Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-05200)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Designer 14.1 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Acrobat Reader buffer overflow vulnerability (CNVD-2025-05566)

Adobe Acrobat is the United States of America Odo than Adobe company's set of software suite used to create, edit, view and print PDF Portable Document Format files. A security vulnerability exists in Adobe Acrobat, which originates from an out-of-bounds read and can be exploited by an attacker t...

Adobe Substance 3D Designer Null Pointer Dereference Vulnerability

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Designer 1.15.0 and prior versions, which can be exploited by an attacker to cause the application to crash, resulting in a denial of service conditio...

ZTE GoldenDB Elevation of Privilege Vulnerability

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An elevation of privilege vulnerability exists in ZTE GoldenDB, which...

Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05204)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. A heap buffer overflow vulnerability exists in Adobe Substance 3D Designer 1.15.0 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05211)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer heap buffer overflow vulnerability can be exploited by an attacker to execute arbitrary code in the context of the current user...

MonetDB Server SQL Injection Vulnerability (CNVD-2025-05227)

MonetDB is MonetDB open source an open source column-oriented relational database management system . A SQL injection vulnerability exists in the expvaluessetsupertype component of MonetDB version 11.49.1, which can be exploited by an attacker to cause a denial of service via a specially crafted...

Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-05201)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Designer versions and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe InDesign Null Pointer Dereference Vulnerability (CNVD-2025-05248)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A null pointer dereference vulnerability exists in Adobe InDesign ID20.1, ID19.5.2 and earlier versions, which can be exploited by an attacker to cause a denial of service in the application...

Adobe Substance 3D Designer Heap Buffer Overflow Vulnerability (CNVD-2025-05210)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

MRCMS Product Cross-Site Scripting Vulnerability

MRCMS is a content management system. A cross-site scripting vulnerability exists in MRCMS, which stems from insufficient filtering of operations on parameter names/paths, allowing an attacker to inject malicious scripts. The vulnerability can be exploited to inject malicious scripts, which will ...

ZTE GoldenDB elevation of privilege vulnerability (CNVD-2025-10903)

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An elevation of privilege vulnerability exists in ZTE GoldenDB, which...

Adobe InDesign Out-of-Bounds Write Vulnerability (CNVD-2025-05690)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause the application to crash...

WordPress amoCRM WebForm plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin amoCR...

Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability (CNVD-2025-05202)

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Designer version 10.1.2 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the curren...

MonetDB Server SQL Injection Vulnerability

MonetDB is MonetDB open source an open source column-oriented relational database management system . A SQL injection vulnerability exists in the expscard component of MonetDB version 11.49.1, which can be exploited by an attacker to cause a denial of service via a specially crafted SQL statement...

Cisco Content Security Management Appliance Access Authentication Error Vulnerability

Cisco Content Security Management Appliance SMA is a set of content security management equipment from Cisco Cisco. The appliance is mainly used to manage all policies, reports, audit information, etc. for e-mail and Web security devices. The Cisco Content Security Management Appliance has an...

Art Gallery Management System Cross-Site Scripting Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System version 1.0 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by parameter search, which can be exploited by an...

Cisco Secure Client has a data forgery issue vulnerability

Cisco Secure Client is a software for connecting to virtual private networks from the American company Cisco Cisco. Cisco Secure Client has a data forgery issue vulnerability that stems from insufficient runtime resource validation, which can be exploited by an attacker to cause a DLL hijacking...

Unspecified Vulnerability in Multiple Mozilla Products (CNVD-2025-05231)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security vulnerability exists in several Mozilla products that stems...

Online Class and Exam Scheduling System profile.php file cross-site scripting vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter username in the file...

Apache Traffic Server Access Control Error Vulnerability

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. A security vulnerability exists in Apache Traffic Server versions 10.0.0 through 10.0.3, and no detailed vulnerability details are provided at this time...

IBM MQ Denial of Service Vulnerability (CNVD-2025-05564)

IBM MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A denial of service vulnerability exists in IBM MQ that stems from improper handling of invalid heade...

SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24713)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to read out-of-bounds memory...

ChestnutCMS File Upload Vulnerability (CNVD-2025-05386)

ChestnutCMS is a front-end and back-end separated enterprise-level content management system. A file upload vulnerability exists in ChestnutCMS 1.5.2 and earlier versions, which stems from a lack of validation of uploaded files by the parameter file. An attacker can exploit this vulnerability to...

Unspecified Vulnerability in Mozilla Firefox for iOS (CNVD-2025-05232)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox for iOS that originates from an unrecognized QR code link. An attacker could exploit this vulnerability potentially causing integrity to be compromise...

Apache Camel Arbitrary Command Execution Vulnerability (CNVD-2025-05168)

Apache Camel is the United States Apache Apache Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern , referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , and throug...

Samsung Notes wbmp Image Parsing Function Out-of-Bounds Read Vulnerability

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. An out-of-bounds read vulnerability exists in Samsung Notes, which stems from a lack of proper validation of user-supplied data when parsing wbmp images, and can be...

IBM EntireX Information Disclosure Vulnerability (CNVD-2025-05562)

IBM EntireX is a versatile middleware solution from International Business Machines IBM designed to facilitate seamless integration between core enterprise applications and modern applications. An information disclosure vulnerability exists in IBM EntireX version 11.1 that originates from the...

Tenda AC15 Command Injection Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A command injection vulnerability exists in Tenda AC15 version 15.03.05.19, which originates from an application that fails to properly filter constructed command special characters, commands, etc. The vulnerability can be...

IBM Cognos Analytics Path Traversal Vulnerability

IBM Cognos Analytics is a suite of business intelligence software from International Business Machines IBM. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A path traversal...