IBM FlashSystem Code Execution Vulnerability

IBM FlashSystem is a family of high-performance all-flash and hybrid flash storage solutions from International Business Machines IBM. A code execution vulnerability exists in IBM FlashSystem that stems from improper restriction of the RPCAdapter service and can be exploited by remote attackers t...

Tenda TX3 openschedwifi function buffer overflow vulnerability

The Tenda TX3 is a wireless router from the Chinese company Tenda. Tenda TX3 16.03.13.11multi suffers from a buffer overflow vulnerability, which stems from the failure of the goform /openschedwifi parameters schedStartTime/schedEndTime to correctly validate the length of the input data, which ca...

D-Link DAP-1562 Null Pointer Dereference Vulnerability

The D-Link DAP-1562 is a wireless bridge from China's AUO D-Link. The D-Link DAP-1562 suffers from a null pointer dereference vulnerability, which originates from a null pointer dereference to parameter a1 in the HTTP POST Request Handler's function pureauthcheck, for which no detailed...

Samsung Notes Out-of-Bounds Read Vulnerability (CNVD-2025-12768)

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. Samsung Notes suffers from an out-of-bounds read vulnerability, which originates from an out-of-bounds read in a text content binary application, and can be exploited...

Apache Camel Arbitrary Command Execution Vulnerability (CNVD-2025-05168)

Apache Camel is the United States Apache Apache Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern , referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , and throug...

Samsung Notes Out-of-Bounds Read Vulnerability

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. Samsung Notes suffers from an out-of-bounds read vulnerability that originates from an out-of-bounds read when text data is applied binary, which can be exploited by ...

SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24714)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to read out-of-bounds memory...

Tenda TX3 setNetControllist function buffer overflow vulnerability

Tenda TX3 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda TX3 16.03.13.11multi, which originates when the parameter list of goform /setNetControllist fails to correctly validate the length of the input data, and can be exploited by an attacker t...

Restaurant Table Booking System username/mobileno Parameter SQL Injection Vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter username/mobileno in the...

Google ChromeOS Elevation of Privilege Vulnerability

Google ChromeOS is a Web-based lightweight open source operating system from Google Google. Google ChromeOS suffers from an elevation of privilege vulnerability that originates from elevation of privilege in the installer and recovery image handling, which can be exploited by an attacker to cause...

SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24717)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to read out-of-bounds memory...

SAMSUNG Notes out-of-bounds read-in vulnerability (CNVD-2025-24715)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. An out-of-bounds read vulnerability exists in SAMSUNG Notes, which can be exploited by an attacker to read out-of-bounds memory...

Samsung Notes Access Control Error Vulnerability

Samsung Notes is an application from the South Korean company Samsung SAMSUNG. An access control error vulnerability exists in Samsung Notes that stems from improper access control and can be exploited by an attacker to access data in multiple user profiles...

IBM EntireX Information Disclosure Vulnerability (CNVD-2025-06203)

IBM EntireX is a versatile middleware solution from International Business Machines IBM designed to facilitate seamless integration between core enterprise applications and modern applications. An information disclosure vulnerability exists in IBM EntireX version 11.1, which is caused by an error...

TRENDnet TEW-929DRU /addschedule.htm page cross-site scripting vulnerability

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU version 1.0.0.10 suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the rname variable within the havesamename function on...

Unspecified Vulnerability in IBM EntireX

IBM EntireX is a versatile middleware solution from International Business Machines IBM designed to facilitate seamless integration between core enterprise applications and modern applications. A security vulnerability exists in IBM EntireX version 11.1, which stems from a security issue that can...

IBM MQ Code Execution Vulnerability (CNVD-2025-05563)

IBM MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A code execution vulnerability exists in IBM MQ that stems from improper escape character...

SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24718)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to read out-of-bounds memory...

Samsung Notes SPen String Out-of-Bounds Read Vulnerability

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. An out-of-bounds read vulnerability exists in Samsung Notes, which originates from an out-of-bounds read in the SPen string read, and can be exploited by an attacker ...

WordPress Master Slider plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Master...

SAMSUNG Notes Out-of-Bounds Read Vulnerability (CNVD-2025-24716)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to read out-of-bounds memory...

TRENDnet TEW-929DRU Hardcoded Password Vulnerability

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a hard-coded password vulnerability that can be exploited by an attacker to log in as root...

Samsung Notes bmp Image Parsing Out-of-Bounds Read Vulnerability

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. An out-of-bounds read vulnerability exists in Samsung Notes, which stems from a lack of proper validation of user-supplied data when parsing bmp images, and can be...

NocoDB Cross-Site Scripting Vulnerability (CNVD-2025-05387)

NocoDB is an open source Airtable alternative. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb to a smart spreadsheet. A cross-site scripting vulnerability exists in NocoDB versions prior to 0.258.0, which stems from the lack of effective filtering and escaping of user-supplied data...

Apache Camel Arbitrary Command Execution Vulnerability

Apache Camel is the United States Apache Apache Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern , referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , and throug...

IBM Concert Brute Force Exploit

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. A brute force vulnerability exists in IBM Concert version 1.0.5 that stems from insufficient account lockout settings and can be exploited by an attack...

Siemens Simcenter Femap Memory Corruption Vulnerability

Simcenter Femap is an advanced simulation application for creating, editing and checking finite element models of complex products or systems. A memory corruption vulnerability exists in Siemens Simcenter Femap, which originates when the application reads a file in .NEU format, and can be exploit...

ZZCMS Cross-Site Scripting Vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. A cross-site scripting vulnerability exists in ZZCMS version 2025, which stems from the lack of effective filtering and escaping of user-supplied data by the parameter $SERVER PHPSELF , and can be exploited by an attacker to...

Samsung Galaxy Wearable Access Control Error Vulnerability

Samsung Galaxy Wearable is an official app from the South Korean company Samsung SAMSUNG that is used to manage and connect Samsung's smart wearable devices. Samsung Galaxy Wearable suffers from an Access Control Error vulnerability that stems from improper access control, and no detailed...

Ubiquiti UniFi Protect Cameras Code Execution Vulnerability

Ubiquiti UniFi Protect Cameras is a line of security cameras from Ubiquiti Networks that support the UniFi Protect platform for centralized management with remote access, smart monitoring and more. A code execution vulnerability exists in Ubiquiti UniFi Protect Cameras that stems from improper...

TRENDnet TEW-929DRU /cbi_addcert.htm page cross-site scripting vulnerability

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the configname parameter of the /cbiaddcert.htm page, which can be exploited ...

WordPress Hero Mega Menu plugin SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

IBM EntireX Information Disclosure Vulnerability (CNVD-2025-06204)

IBM EntireX is a versatile middleware solution from International Business Machines IBM designed to facilitate seamless integration between core enterprise applications and modern applications. An information disclosure vulnerability exists in IBM EntireX version 11.1, which is caused by an error...

Tenda AC7 Command Injection Vulnerability (CNVD-2025-05230)

Tenda AC7 is a wireless router from Tenda, a Chinese company. A command injection vulnerability exists in Tenda AC7 version 15.03.06.44. The vulnerability stems from the TendaTelnet function in the /goform/telnet file failing to properly filter constructor command special characters, commands, et...

Samsung Notes jpeg image parsing out-of-bounds read vulnerability

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. An out-of-bounds read vulnerability exists in Samsung Notes, which stems from a lack of proper validation of user-supplied data when parsing jpeg images, and can be...

Cisco Meraki MX67 and Cisco Meraki MX68 Access Authentication Error Vulnerabilities

The Cisco Meraki MX67 and Cisco Meraki MX68 are cloud-managed routers in the Cisco Meraki series. An access validation error vulnerability exists in the Cisco Meraki MX67 and Cisco Meraki MX68 that stems from improper access control and can be exploited by an attacker to cause information...

SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24719)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to access out-of-bounds memory...

Tenda tx3 Buffer Overflow Vulnerability

The Tenda tx3 is a wireless router from the Chinese company Tenda. The Tenda tx3 suffers from a buffer overflow vulnerability that originates from the parameter list of goform/setpptpuserlist failing to properly validate the length size of the input data, which can be exploited by an attacker to...

Open5GS Denial of Service Vulnerability (CNVD-2025-08796)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability that can be exploited by attackers to cause network outages...

TRENDnet TEW-929DRU /captive_portal.htm page cross-site scripting vulnerability

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the ssid key of the wifidata parameter on the /captiveportal.htm page, which...

WordPress Awesome Import & Export plugin license issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

IBM MQ Code Issues Vulnerabilities

IBM MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A code issue vulnerability exists in IBM MQ that stems from improper exception condition checking and...

Samsung Notes bmp Image Out-of-Bounds Read Vulnerability

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. Samsung Notes suffers from an out-of-bounds read vulnerability that stems from an out-of-bounds read during bmp image rle parsing, which can be exploited by an attack...

Samsung Notes Binary Application Out-of-Bounds Read Vulnerability

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. Samsung Notes suffers from an out-of-bounds read vulnerability, which arises from an out-of-bounds read when drawing the content binary application, and can be...

Samsung Notes Out-of-Bounds Read Vulnerability (CNVD-2025-12770)

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. Samsung Notes suffers from an out-of-bounds read vulnerability, which arises from an out-of-bounds read when the base content extra data is applied, and can be...

Tenda TX3 setstaticRoutecfg function buffer overflow vulnerability

Tenda TX3 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda TX3 16.03.13.11multi, which originates when the parameter list of goform /setstaticRoutecfg fails to correctly validate the length of the input data, and can be exploited by an attacker t...

Google Chrome Information Disclosure Vulnerability (CNVD-2025-05086)

Google Chrome is a web browser from Google, an American company. An information disclosure vulnerability exists in Google Chrome versions prior to 134.0.6998.88, which stems from an out-of-bounds read in V8 that can be exploited by an attacker to obtain sensitive information...

Emergency Ambulance Hiring Portal contactnumber Parameter SQL Injection Vulnerability

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the contactnumber parameter of the /admin/admin-profile.php file. An...

Dell ThinOS Command Injection Vulnerability

Dell ThinOS is a client operating system from the American company Dell. Dell ThinOS suffers from a command injection vulnerability that arises from an application's failure to properly filter constructed command special characters, commands, etc. The vulnerability can be exploited to execute...

Apple macOS Resource Management Error Vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in Apple macOS Sequoia, which stems from memory handling improvements, and can be exploited by an attacker to cause an unexpected system termination or kernel memory corruption...