131891 matches found
Samsung Notes bmp Image Out-of-Bounds Read Vulnerability
Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. Samsung Notes suffers from an out-of-bounds read vulnerability that stems from an out-of-bounds read during bmp image rle parsing, which can be exploited by an attack...
IBM MQ Code Issues Vulnerabilities
IBM MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A code issue vulnerability exists in IBM MQ that stems from improper exception condition checking and...
SAMSUNG Notes out-of-bounds read vulnerability (CNVD-2025-24719)
SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to access out-of-bounds memory...
Tenda AC7 Command Injection Vulnerability (CNVD-2025-05230)
Tenda AC7 is a wireless router from Tenda, a Chinese company. A command injection vulnerability exists in Tenda AC7 version 15.03.06.44. The vulnerability stems from the TendaTelnet function in the /goform/telnet file failing to properly filter constructor command special characters, commands, et...
Tenda TX3 setstaticRoutecfg function buffer overflow vulnerability
Tenda TX3 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda TX3 16.03.13.11multi, which originates when the parameter list of goform /setstaticRoutecfg fails to correctly validate the length of the input data, and can be exploited by an attacker t...
TRENDnet TEW-929DRU /captive_portal.htm page cross-site scripting vulnerability
The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the ssid key of the wifidata parameter on the /captiveportal.htm page, which...
Samsung Notes Binary Application Out-of-Bounds Read Vulnerability
Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. Samsung Notes suffers from an out-of-bounds read vulnerability, which arises from an out-of-bounds read when drawing the content binary application, and can be...
WordPress Awesome Import & Export plugin license issue vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...
Tenda tx3 Buffer Overflow Vulnerability
The Tenda tx3 is a wireless router from the Chinese company Tenda. The Tenda tx3 suffers from a buffer overflow vulnerability that originates from the parameter list of goform/setpptpuserlist failing to properly validate the length size of the input data, which can be exploited by an attacker to...
Cisco Meraki MX67 and Cisco Meraki MX68 Access Authentication Error Vulnerabilities
The Cisco Meraki MX67 and Cisco Meraki MX68 are cloud-managed routers in the Cisco Meraki series. An access validation error vulnerability exists in the Cisco Meraki MX67 and Cisco Meraki MX68 that stems from improper access control and can be exploited by an attacker to cause information...
Samsung Notes jpeg image parsing out-of-bounds read vulnerability
Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. An out-of-bounds read vulnerability exists in Samsung Notes, which stems from a lack of proper validation of user-supplied data when parsing jpeg images, and can be...
Samsung Notes Out-of-Bounds Read Vulnerability (CNVD-2025-12770)
Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. Samsung Notes suffers from an out-of-bounds read vulnerability, which arises from an out-of-bounds read when the base content extra data is applied, and can be...
Open5GS Denial of Service Vulnerability (CNVD-2025-08796)
Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability that can be exploited by attackers to cause network outages...
Google Pixel Watch integer overflow vulnerability
Google Pixel Watch is a long-lasting smartwatch from Google USA. Google Pixel Watch suffers from an integer overflow vulnerability that originates from an integer overflow in dhdprocessfullgscanresult in dhdpno.c. An attacker can exploit this vulnerability to cause a local elevation of privilege...
Apple macOS Resource Management Error Vulnerability
Apple macOS is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in Apple macOS Sequoia, which stems from memory handling improvements, and can be exploited by an attacker to cause an unexpected system termination or kernel memory corruption...
Apache Tomcat Remote Code Execution Vulnerability
Apache Tomcat is an open source lightweight Java Web server and Servlet container , designed to run Java Servlet and JSP core tools designed to support dynamic content processing and hosting of static resources , is the cornerstone of small and medium-sized Java Web application development and...
Microsoft Office Code Execution Vulnerability (CNVD-2025-09955)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Common components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...
Microsoft Office Code Execution Vulnerability (CNVD-2025-09952)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office due to an untrusted pointer dereference...
Google Chrome Information Disclosure Vulnerability (CNVD-2025-05086)
Google Chrome is a web browser from Google, an American company. An information disclosure vulnerability exists in Google Chrome versions prior to 134.0.6998.88, which stems from an out-of-bounds read in V8 that can be exploited by an attacker to obtain sensitive information...
Emergency Ambulance Hiring Portal ambulanceregnum Parameter SQL Injection Vulnerability
Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the ambulanceregnum parameter of the file /admin/booking-details.php...
Dell ThinOS Command Injection Vulnerability
Dell ThinOS is a client operating system from the American company Dell. Dell ThinOS suffers from a command injection vulnerability that arises from an application's failure to properly filter constructed command special characters, commands, etc. The vulnerability can be exploited to execute...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-09953)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on the system...
Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2025-05245)
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...
Mozilla Thunderbird Code Issue Vulnerability
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A code issue vulnerability exists in Mozilla Thunderbird versions prior to 136 and prior ...
Microsoft Office Code Execution Vulnerability (CNVD-2025-10663)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...
Microsoft Word Code Execution Vulnerability (CNVD-2025-09957)
Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Emergency Ambulance Hiring Portal contactnumber Parameter SQL Injection Vulnerability
Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the contactnumber parameter of the /admin/admin-profile.php file. An...
Apartment Visitors Management System editid Parameter SQL Injection Vulnerability
Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the editid parameter of file /visitor-detail.php. An...
Apartment Visitors Management System searchdata Parameter SQL Injection Vulnerability
Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that stems from a lack of validation of the searchdata parameter against externally entered SQL statements. An attacker can exploit this...
Google Pixel Logic Error Vulnerability (CNVD-2025-05455)
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a logic error vulnerability that originates from a code logic error in ppcfw.c's ppcfwdenysecdramaccess, which can be exploited by an attacker to cause an arbitrary read from the TEE memory without...
Emergency Ambulance Hiring Portal searchdata Parameter SQL Injection Vulnerability
Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the searchdata parameter of the /admin/search.php file. An attacke...
Microsoft Azure Arc Installer Elevation of Privilege Vulnerability
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. An elevation of privilege vulnerability exists in Microsoft Azure Arc Installer, which can be exploited by an attacker to elevate privileges...
Google Pixel Watch Buffer Overflow Vulnerability
Google Pixel Watch is a long-lasting smartwatch from Google USA. The Google Pixel Watch suffers from a buffer overflow vulnerability that stems from a missing bounds check in wlnotifygscanevent in wlcfgscan.c, which can be exploited by an attacker to cause a local elevation of privilege without...
IBM Sterling File Gateway Information Leakage Vulnerability (CNVD-2025-06655)
IBM Sterling File Gateway is a suite of file transfer software from International Business Machines IBM. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. An information leakage vulnerability exists in IBM...
Microsoft Word Code Execution Vulnerability (CNVD-2025-09958)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
IBM Aspera Shares XML External Entity Injection Vulnerability (CNVD-2025-06646)
IBM Aspera Shares is a Web application from International Business Machines IBM. An XML external entity injection vulnerability exists in IBM Aspera Shares versions 1.9.9 through 1.10.0 PL7, which arises from a web system or product that does not have the correct filters set to allow references t...
Microsoft Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability
Microsoft Azure Agent Installer for Backup and Site Recovery provides disaster recovery solutions for local computers and Azure VMs. An elevation of privilege vulnerability exists in Microsoft Azure Agent Installer for Backup and Site Recovery, which can be exploited by an attacker to elevate...
Microsoft Access Code Execution Vulnerability (CNVD-2025-05244)
Microsoft Access is a relational database management system in the Office suite of the U.S. Microsoft Microsoft Corporation. A code execution vulnerability exists in Microsoft Access, which can be exploited by an attacker to execute arbitrary code on the system...
Google Chrome Code Execution Vulnerability (CNVD-2025-05087)
Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome prior to version 134.0.6998.88, which stems from a reuse-after-release vulnerability in Inspector, and can be exploited by an attacker to execute arbitrary code on a system...
Google Android Buffer Overflow Vulnerability
Google Android is a free and open source mobile operating system developed by Google Inc. based on the Linux kernel. Google Android suffers from a buffer overflow vulnerability that originates from incorrect boundary checking in static long devsend of tipcdevql, which can be exploited by an...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-09954)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...
Microsoft Office Code Execution Vulnerability (CNVD-2025-05243)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-10611)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...
Unspecified Vulnerability in Online Library Management System (CNVD-2025-21692)
Online Library Management System is an online library management system. A security vulnerability exists in the Online Library Management System, which originates from improper manipulation of the email/phone number parameter in the /change-password.php file, and can be exploited by an attacker t...
Apartment Visitors Management System contactno Parameter SQL Injection Vulnerability
Apartment Visitors Management System is an apartment visitor management system. The Apartment Visitors Management System suffers from a SQL injection vulnerability that stems from a lack of validation of the contactno parameter against externally entered SQL statements. An attacker can use this...
TOTOLINK EX1800T Buffer Overflow Vulnerability
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from a buffer overflow vulnerability that originates from the parameter loginpass failing to properly validate the length size of the input data, which can be exploited by an attack...
Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2025-09951)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...
Google Chromium Misimplementation Vulnerability
Microsoft Edge Chromium-based is a web browser developed by Microsoft based on the Chromium open source project and other open source software. A mal-implementation vulnerability exists in the Permission Prompts component of Microsoft Edge Chromium-based, no details of the vulnerability are...
IBM Control Center Cross-Site Scripting Vulnerability
IBM Control Center is a centralized monitoring and management system from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Control Center versions 6.2.1 through 6.3.1, which stems from improper validation of the HOST header input, and can be exploited by an...
Emergency Ambulance Hiring Portal pagedes parameter SQL Injection Vulnerability
Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the pagedes parameter of the /admin/about-us.php file. An attacker c...