131891 matches found
Tenda FH1202 Improper Access Control Vulnerability (CNVD-2025-07533)
The Tenda FH1202 is a wireless router from China's Tenda. An improper access control vulnerability exists in the Tenda FH1202. No detailed vulnerability details are available at this time...
Google Android Cache Overflow Vulnerability (CNVD-2025-07529)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from a code logic error that can be exploited by an attacker to remotely execute code...
Tenda FH1202 Improper Access Control Vulnerability (CNVD-2025-07532)
The Tenda FH1202 is a wireless router manufactured by Tenda. An improper access control vulnerability exists in the Tenda FH1202. The vulnerability stems from improper access control due to manipulation of the parameter 'these' in the file /default.cfg. An attacker could exploit this vulnerabilit...
Google Android Code Execution Vulnerability (CNVD-2025-10930)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused due to a flaw in a system component. An attacker can exploit the vulnerability to execute arbitrary code on the system...
Google Android elevation of privilege vulnerability (CNVD-2025-11431)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates in the WindowOrganizerController.java file's applyTaskFragmentOperation function, which contains a logic error that can be exploited by an...
Google Android Information Disclosure Vulnerability (CNVD-2025-07530)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that stems from a code logic error that can be exploited by an attacker to obtain sensitive information...
Google Android elevation of privilege vulnerability (CNVD-2025-11432)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which arises from the program incorrectly retaining setup privileges, and can be exploited by an attacker to elevate privileges without requiring addition...
Google Android elevation of privilege vulnerability (CNVD-2025-12378)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a competitive condition flaw in multiple functions in AccountManagerService.java, which can be exploited by an attacker to gain elevated privileges ...
Google Android Buffer Overflow Vulnerability (CNVD-2025-07523)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from the program not properly checking boundaries, which can be exploited by an attacker to execute remote code...
Google Android elevation of privilege vulnerability (CNVD-2025-07520)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from insecure deserialization, which can be exploited by an attacker to bypass the parcel mismatch mitigation and elevate privileges...
SQL Injection Vulnerability in Founder Unlimited Media News Editorial System of Beijing Beifang Founder Electronics Co.
Beijing Beifang Founder Electronics Co., Ltd. is a leading technology and service provider in the fields of printing, media, publishing, and character libraries. A SQL injection vulnerability exists in Beijing Founder Electronics Co., Ltd.'s Founder Unlimited All-Media News Gathering and Editing...
Denial of Service Vulnerability in D-Link DIR-823x
The D-Link DIR-823X is a wireless router from China's AUO D-Link. A denial of service vulnerability exists in the D-Link DIR-823x, which can be exploited by attackers to cause a denial of service...
Tenda W6-S setcfm function buffer overflow vulnerability
Tenda W6-S is a 300Mbps wireless panel AP designed for large households such as homes, hotels and villas to provide stable wireless network coverage and low latency network experience. The Tenda W6-S suffers from a buffer overflow vulnerability that originates from the setcfm function failing to...
Dell Unity OS Command Injection Vulnerability
Dell Unity is a set of virtual Unity storage environments from Dell USA. Dell Unity 5.4 and prior versions suffer from an OS command injection vulnerability that stems from the application failing to properly filter construct command special characters, commands, and so on. An attacker could...
IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2025-06807)
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.7, which stems...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-06617)
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
File Upload Vulnerability in MCMS of Jiangxi Minsoft Technology Co.
MCMS is a java-based development of a lightweight open source content management system . Jiangxi Mingsoft Technology Co., Ltd MCMS file upload vulnerability, an attacker can use the vulnerability to obtain control of the server...
TOTOLINK A800R Command Execution Vulnerability
The TOTOLINK A800R is a wireless router manufactured by TOTOLINK. A command execution vulnerability exists in the TOTOLINK A800R. The vulnerability stems from a flaw in the processing of user input via the NoticeUrl parameter in the setNoticeCfg function, which can be exploited by an attacker to...
IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2025-06806)
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.7, which stems...
Moodle Permission Issues Vulnerability
Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. A vulnerability exists in Moodle for privilege issues. The vulnerability stems from insufficient permission checking that allo...
IBM InfoSphere Information Server Log Information Disclosure Vulnerability (CNVD-2025-06808)
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.7, which stems...
TOTOLINK A3000RU Access Control Error Vulnerability
The TOTOLINK A3000RU is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3000RU is vulnerable to an access control error vulnerability that stems from an improper access control issue in the IBMS profile handling component. No detailed vulnerability details are available at...
WeGIA SQL Injection Vulnerability (CNVD-2025-22279)
WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that stems from a lack of validation of the idfuncionario parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...
WeGIA SQL Injection Vulnerability (CNVD-2025-22280)
WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that stems from a lack of validation of query parameters against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive...
PyTorch Denial of Service Vulnerability (CNVD-2025-23355)
PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a denial of service vulnerability caused by a floating point exception in the function torch.mkldnnmaxpool2d. An attacker can exploit this vulnerability to cause a denial of service...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-06618)
Dell Unity is a set of virtual Unity storage environments from Dell USA. Dell Unity suffers from an OS command injection vulnerability that can be exploited by an attacker to execute arbitrary operating system commands on the system...
Payroll Management System SQL Injection Vulnerability (CNVD-2025-06475)
Payroll Management System is a payroll management system. A SQL injection vulnerability exists in Payroll Management System version 1.0 due to a lack of validation of externally entered SQL statements in the parameter emptype. An attacker can exploit this vulnerability to execute illegal SQL...
SQL Injection Vulnerability in U8Cloud of UFIDA Network Technology Co.
U8cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. A SQL injection vulnerability exists in UFIDA U8Cloud, which can be exploited by attackers to obtain sensitive database...
Wyse Management Suite Information Disclosure Vulnerability
Wyse Management Suite is a software solution from Dell for managing and monitoring client devices and virtual desktop infrastructures. An information disclosure vulnerability exists in Wyse Management Suite. The vulnerability results in the disclosure of sensitive information due to a data query...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-06612)
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-06613)
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-22281)
WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability for which no detailed vulnerability details are currently available...
JetBrains TeamCity Information Disclosure Vulnerability
JetBrains TeamCity is a powerful continuous integration and continuous delivery CI/CD tool developed by JetBrains. JetBrains TeamCity suffers from an information disclosure vulnerability that stems from base64 encoded passwords being exposed in build logs. An attacker can exploit the vulnerabilit...
IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2025-06805)
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.7, which stems...
HDF5 H5F_addr_encode_len function buffer overflow vulnerability
HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Faddrencodelen function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...
TOTOLINK A3100R Code Execution Vulnerability
TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R suffers from a code execution vulnerability that stems from setWebWlanIdx failing to properly filter construct command special characters, commands, and so on. An attacker can exploit this...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-06615)
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
HDF5 H5F__accum_free function buffer overflow vulnerability
HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Faccumfree function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-06616)
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
TOTOLINK A3002R Command Injection Vulnerability
TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a command injection vulnerability that stems from bandstr failing to correctly filter construct command special characters, commands, etc. An attacker can exploit this vulnerability to...
SQL Injection Vulnerability in Salary Inquiry System of Wuhan Evonik Software Co.
Wuhan Evonik Software Co., Ltd. specializes in AutoCAD secondary development, Office secondary development, information management systems, etc., is committed to creating efficient CAD graphics and Office productivity tools. Wuhan Evonik Software Co., Ltd. salary inquiry system SQL injection...
TOTOLINK A810R Buffer Overflow Vulnerability
The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK A810R suffers from a buffer overflow vulnerability that originates from downloadFile.cgi failing to properly validate the length and size of input data, which can be exploited by an attacker to...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-06614)
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
HDF5 Double Release Vulnerability
HDF5 is a library of HDF open source . HDF5 has a double release vulnerability, which originates from the double release of the parameter mem of the function H5MMrealloc in the file src/H5MM.c. There are no detailed vulnerability details provided...
Tenda FH1202 Access Control Error Vulnerability (CNVD-2025-08907)
The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 is vulnerable to an access control error vulnerability that stems from improper access control. No detailed vulnerability details are available at this time...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-06621)
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-06620)
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
Dell Unity OS Command Injection Vulnerability (CNVD-2025-06619)
Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...
HDF5 H5HL__fl_deserialize function heap buffer overflow vulnerability
HDF5 is a library of HDF open source . HDF5 suffers from a heap buffer overflow vulnerability. The vulnerability stems from the mishandling of the freeblock parameter by the H5HLfldeserialize function in the src/H5HLcache.c file. No detailed vulnerability details are provided at this time...
JetBrains TeamCity Information Disclosure Vulnerability (CNVD-2025-13586)
JetBrains TeamCity is a powerful continuous integration and continuous delivery CI/CD tool developed by JetBrains. JetBrains TeamCity suffers from an information disclosure vulnerability that stems from mishandling of an exception that results in the disclosure of credentials on the cloud...