131658 matches found
Huawei HarmonyOS File System Out-of-Bounds Write Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds write vulnerability exists in the Huawei HarmonyOS file system, which can be exploited by an attacker to cause availability to be compromise...
Tenda F456 fromNatStaticSetting Parameter Stack Buffer Overflow Vulnerability
Tenda F456 is a home wireless router product that is mainly used to provide wireless network access and network management functions. The Tenda F456 suffers from a stack buffer overflow vulnerability. The vulnerability stems from the failure of the fromNatStaticSetting function in...
Huawei HarmonyOS multi-mode input system double release vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A double-release vulnerability exists in the Huawei HarmonyOS multi-mode input system, which can be exploited by an attacker to cause an availability impact...
TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32780)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWanCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly...
TOTOLINK N300RH Operating System Command Injection Vulnerability (CNVD-2026-32760)
TOTOLINK N300RH is a 300Mbps single-band long-range wireless router launched by the TOTOLINK brand. It operates on the IEEE802.11n standard and is designed to enhance wireless coverage. TOTOLINK N300RH has a vulnerability related to operating system command injection. This vulnerability stems fro...
Huawei HarmonyOS and EMUI LBS module privilege bypass access vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A privilege bypass access vulnerability exists in Huaw...
WordPress Plugin User Registration & Membership Input Validation Error Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin User Registration & Membership has an input validation error vulnerability tha...
Huawei HarmonyOS and EMUI kernel module memory misreference vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A memory misreference vulnerability exists in Huawei...
Huawei HarmonyOS Media Platform Stack Overflow Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A stack overflow vulnerability exists in the Huawei HarmonyOS media platform, which can be exploited by an attacker to cause availability to be compromised...
Huawei HarmonyOS WEB module out-of-bounds write vulnerability (CNVD-2026-17169)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds write vulnerability exists in the Huawei HarmonyOS WEB module, which can be exploited by an attacker to compromise confidentiality and...
Huawei HarmonyOS Event Notification Module Competitive Condition Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A contention condition vulnerability exists in the Huawei HarmonyOS event notification module, which stems from a failure of the event notification module to...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32910)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the UploadOpenVpnCert function in the cstecgi.cgi file, which fails to properly handle the...
Huawei HarmonyOS Notification Service Competitive Conditions Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A competitive condition vulnerability exists in the Huawei HarmonyOS notification service, which can be exploited by attackers to cause availability to be...
TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg function ssid5g parameter stack buffer overflow vulnerability
TOTOLINK A7000R is a wireless router product that is mainly used to provide network connectivity and Wi-Fi access. TOTOLINK A7000R suffers from a stack buffer overflow vulnerability. The vulnerability stems from the setWiFiEasyGuestCfg function in the /cgi-bin/cstecgi.cgi file failing to properly...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32909)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the failure of the UploadFirmwareFile function in the /cgi-bin/cstecgi.cgi file to...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32908)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWizardCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly...
FFmpeg av_bprint_finalize() function heap buffer overflow vulnerability
FFmpeg is an open source software library for processing multimedia data. A heap buffer overflow vulnerability exists in FFmpeg. The vulnerability stems from the avbprintfinalize function failing to properly handle specially crafted input and can be exploited by an attacker to cause a denial of...
FFmpeg read_global_param() function out-of-bounds read vulnerability
FFmpeg is an open source software library for processing multimedia data. An out-of-bounds read vulnerability exists in FFmpeg. The vulnerability stems from a failure of the readglobalparam function to properly handle specially crafted input, which can be exploited by an attacker to cause a denia...
Huawei HarmonyOS and EMUI kernel module out-of-bounds write vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. An out-of-bounds write vulnerability exists in the...
Huawei HarmonyOS Communication Module Memory Misreference Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A memory misreference vulnerability exists in the Huawei HarmonyOS communication module, which can be exploited by an attacker to cause availability to be...
Huawei HarmonyOS Thermal Management Module Competitive Conditions Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A competitive condition vulnerability exists in the Huawei HarmonyOS thermal management module that can be exploited by an attacker to cause availability to ...
Huawei HarmonyOS Screen Management Module Memory Misreference Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A memory misreference vulnerability exists in the Huawei HarmonyOS screen management module, which can be exploited by an attacker to cause availability to b...
TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32761)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setIpQosRules function in the cstecgi.cgi script, which fails to properly valida...
WordPress Plugin Product Filter for WooCommerce by WBW Has Unspecified Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Product Filter for WooCommerce by WBW,...
Huawei HarmonyOS Power Consumption Statistics Module Competitive Conditions Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A competitive condition vulnerability exists in the Huawei HarmonyOS Power Consumption Statistics module, which can be exploited by an attacker to cause...
Huawei HarmonyOS and EMUI kernel module memory misreference vulnerability (CNVD-2026-17177)
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A memory misreference vulnerability exists in Huawei...
Huawei HarmonyOS Application Read Module Boundary Unrestricted Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A boundary-unlimited vulnerability exists in the Huawei HarmonyOS application read module, which can be exploited by an attacker to cause availability to be...
Huawei HarmonyOS Memo Module Access Control Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An access control vulnerability exists in the Huawei HarmonyOS memoization module, which can be exploited by an attacker to cause confidentiality and...
Totolink A3002MU formWlanSetup file wan-url parameter stack buffer overflow vulnerability
Totolink A3002MU is a wireless router product that provides network connectivity and wireless access. A stack buffer overflow vulnerability exists in the Totolink A3002MU. The vulnerability stems from a failure to properly handle the wan-url parameter in the HTTP request handling component, which...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32917)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setAdvancedInfoShow function in the /cgi-bin/cstecgi.cgi file, which fails to...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32925)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setTtyServiceCfg function in the /cgi-bin/cstecgi.cgi file, which fails to...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32921)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setTracerouteCfg function in the CGI processing component, which fails to proper...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32914)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the improper handling of the enable parameter in the setSyslogCfg function. Attackers can exploi...
TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32912)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setPptpServerCfg function in the cstecgi.cgi file, which fails to properly handle the enable...
TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32913)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the failure of the setUrlFilterRules function to properly validate the enable...
TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32911)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setVpnAccountCfg function in the /cgi-bin/cstecgi.cgi file, which fails to...
TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32923)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setAppCfg function in the CGI handler, which fails to properly validate the enab...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32919)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWiFiGuestCfg function, which fails to properly handle the wifiOff parameter...
TOTOLINK A7100RU operating system command injection vulnerability (CNVD-2026-32922)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setDiagnosisCfg function in the /cgi-bin/cstecgi.cgi file, which fails to proper...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32920)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setLedCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32916)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability arises from the CGI handler’s failure to properly handle the admpass parameter in the setLoginPasswordCfg...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32926)
TOTOLINK A7100RU is a wireless router produced by China Jiying Electronics Corporation. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setRadvdCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly handle t...
Tenda F451 SetIpBind fromSetIpBind page parameter stack buffer overflow vulnerability
Tenda F451 is a wireless router product that provides network connectivity and wireless coverage. The Tenda F451 suffers from a stack buffer overflow vulnerability. The vulnerability stems from the failure of the fromSetIpBind function in /goform/SetIpBind to properly handle the page parameter,...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32924)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setNetworkCfg function in the cstecgi.cgi file, which fails to properly validate the proto...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32918)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setTelnetCfg function in the cstecgi.cgi file, which fails to properly validate the...
TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32915)
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setPortalConfWeChat function in the cstecgi.cgi file, which fails to properly handle the...
Discourse code issue vulnerability (CNVD-2026-17261)
Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from a code issue vulnerability that can be exploited by an attacker to cause the server to initiate outbound connectio...
Discourse Information Disclosure Vulnerability (CNVD-2026-17249)
Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . An information disclosure vulnerability exists in Discourse. The vulnerability stems from the fact that an authenticated user can send an...
IBM Aspera Shares Encryption Problem Vulnerability (CNVD-2026-16873)
IBM Aspera Shares is a Web application from International Business Machines IBM. An encryption issue vulnerability exists in IBM Aspera Shares versions 1.9.9 through 1.11.0. The vulnerability stems from the use of a weak encryption algorithm and can be exploited by an attacker to decrypt highly...
Dell Secure Connect Gateway Path Traversal Vulnerability
The Dell Secure Connect Gateway Dell SCG is a secure connectivity gateway from Dell, USA. A path traversal vulnerability exists in Dell Secure Connect Gateway. The vulnerability stems from the program failing to properly filter for specific elements in a resource or file path, which could be...