131658 matches found
Microsoft Office SharePoint Server Cross-site Scripting Vulnerability (CNVD-2026-29408)
Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, and Microsoft SharePoint Server Subscription Edition are enterprise-level collaboration platforms developed by Microsoft. They are primarily used for document management, content publishing, and workflow collaboration...
Microsoft Excel code execution vulnerability (CNVD-2026-28616)
Microsoft Office is a suite of office software products developed by the American company Microsoft. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. Microsoft Excel has a code execution vulnerability, which allows attackers to execute arbitrary code on...
Adobe Audition out-of-bounds read vulnerability (CNVD-2026-31986)
Adobe Audition is an audio editing software developed by Adobe, a company based in the United States. Adobe Audition has a cross-domain read vulnerability. This vulnerability arises due to improper handling of malicious files, and attackers can exploit this vulnerability to leak sensitive memory...
Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2026-31724)
Adobe Illustrator is a vector graphics design and illustration software developed by Adobe Inc. in the United States. Adobe Illustrator has a out-of-bounds write-up vulnerability, allowing attackers to execute arbitrary code under the current user environment...
Microsoft Office Excel stack buffer overflow vulnerability (CNVD-2026-29407)
Microsoft Office Excel is a spreadsheet processing software within the Microsoft Office suite, primarily used for data organization, analysis, and visualization. Microsoft Office Excel has a stack buffer overflow vulnerability, which stems from improper handling of memory operations. Attackers ca...
Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2026-31726)
Adobe Illustrator is a vector graphics design and illustration software developed by Adobe Inc. in the United States. Adobe Illustrator has a out-of-bounds write-up vulnerability, allowing attackers to execute arbitrary code under the current user environment...
Microsoft Office SharePoint Server cross-site scripting vulnerability
Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, and Microsoft SharePoint Server Subscription Edition are enterprise-level collaboration and content management platforms provided by Microsoft. Microsoft Office SharePoint Server has a cross-site scripting vulnerabilit...
Tenda BE12 Pro stack buffer overflow vulnerability (CNVD-2026-32961)
The Tenda BE12 Pro is a Wi-Fi 7 wireless router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromSetIpBind function in the /goform/SetIpBind file, which fails to correctly validate the length of the page...
Microsoft Office buffer overflow vulnerability (CNVD-2026-31554)
Microsoft Office is a suite of office software that primarily provides features for document editing, spreadsheet processing, presentation creation, and enterprise collaboration. There is a buffer overflow vulnerability in Microsoft Office. This vulnerability stems from an improper validation of...
Microsoft Office Excel heap buffer overflow vulnerability (CNVD-2026-29405)
Microsoft Office Excel is a spreadsheet processing software in the Microsoft Office suite. It primarily provides functions such as data calculation, chart analysis, and table management. There is a heap buffer overflow vulnerability in Microsoft Office Excel. This vulnerability occurs due to the...
Microsoft Office Information Leakage Vulnerability (CNVD-2026-28613)
Microsoft Office is a suite of office software products developed by the American company Microsoft. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. Microsoft Office has information leakage vulnerabilities, and attackers can exploit these vulnerabilities ...
Microsoft Excel code execution vulnerability (CNVD-2026-28559)
Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is a code execution vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to execute arbitrary code...
Microsoft Office Out-of-Bounds Reading Vulnerability (CNVD-2026-31556)
Microsoft Office is a suite of office software that provides features such as document processing, spreadsheet calculations, presentation creation, and collaboration. Microsoft Office has a out-of-bounds read vulnerability, which stems from the program’s failure to properly validate memory...
Adobe Illustrator Input Validation Vulnerability (CNVD-2026-31723)
Adobe Illustrator is a vector graphics design and illustration software developed by Adobe Inc. in the United States. Adobe Illustrator has a vulnerability in input validation, allowing attackers to execute arbitrary code within the context of the current user...
Microsoft Office Word buffer overflow vulnerability (CNVD-2026-29409)
Microsoft Office Word is a word processing application within the Microsoft Office suite, primarily providing features for document editing, formatting, and typesetting. There is a heap buffer overflow vulnerability in Microsoft Office Word. This vulnerability stems from the program’s failure to...
NVIDIA Triton Inference Server Authorization Issue Vulnerability
NVIDIA Triton Inference Server is an open-source AI model inference service system developed by NVIDIA Corporation in the United States. There is an authorization issue vulnerability in NVIDIA Triton Inference Server. This vulnerability stems from the existence of alternative paths or channels,...
Microsoft Office Excel buffer overflow vulnerability (CNVD-2026-31551)
Microsoft Office Excel is a spreadsheet software developed by the American company Microsoft. Microsoft Office Excel has a buffer error vulnerability, which stems from out-of-bounds reading. Attackers can exploit this vulnerability to execute code locally...
Microsoft Excel heap buffer overflow vulnerability (CNVD-2026-31553)
Microsoft Excel is a spreadsheet processing component within the Microsoft Office suite, primarily used for data calculation, analysis, and visualization. Microsoft Excel has a heap buffer overflow vulnerability, which stems from improper handling of certain data, leading to out-of-bound writes t...
Siemens SICAM 8 product configuration error vulnerability
Siemens CPCI85 Central Processing/Communication is a central processing and communication device developed by the German company Siemens. Siemens SICORE Base system is a core foundational software component of the SICAM 8 power automation platform, designed specifically for substation automation...
Microsoft Office Excel buffer overflow vulnerability (CNVD-2026-29412)
Microsoft Office Excel is a spreadsheet processing software in the Microsoft Office suite. It supports data calculation, chart analysis, and macro functions. There is a buffer overflow vulnerability in Microsoft Office Excel. This vulnerability stems from the improper handling of boundary...
Microsoft Office Code Execution Vulnerability (CNVD-2026-28485)
Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. Microsoft Office has a code execution vulnerability, which stems from the use of incompatible...
Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2026-31725)
Adobe Illustrator is a vector graphics design and illustration software developed by Adobe Inc. in the United States. Adobe Illustrator has a out-of-bounds write-up vulnerability, allowing attackers to execute arbitrary code in the current user environment. This requires the user to open a...
Tenda BE12 Pro stack buffer overflow vulnerability (CNVD-2026-32963)
The Tenda BE12 Pro is a Wi-Fi7 router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromSafeMacFilter function, which fails to correctly validate the input length when processing the page parameter. Attackers can...
Siemens SICAM 8 product log information leakage vulnerability
The Siemens CPCI85 Central Processing/Communication is a central processing and communication device developed by the German company Siemens. The Siemens SICORE Base system is a core foundational software component of the SICAM 8 power automation platform, designed specifically for substation...
Microsoft Office SharePoint Server Cross-site Scripting Vulnerability (CNVD-2026-31552)
Microsoft Office SharePoint Server is a web-based content management and collaboration tool designed by Microsoft for enterprise customers. The initial version of this software existed as an Office component and still relies heavily on Office for providing features such as enterprise portals and...
Microsoft Word resource management error vulnerability (CNVD-2026-31550)
Microsoft Office Word is a word processing software within the Microsoft Office suite, widely used for document editing and formatting. There is a resource management vulnerability in Microsoft Office Word; this vulnerability stems from objects not being properly handled after being released...
Adobe Audition Out-of-Bounds Write Vulnerability (CNVD-2026-31988)
Adobe Audition is an audio editing software developed by Adobe, a company based in the United States. Adobe Audition has a cross-domain write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...
Microsoft Excel information leakage vulnerability (CNVD-2026-28541)
Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is an information leakage vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to obtain sensitive information...
Tenda CP3 stack buffer overflow vulnerability (CNVD-2026-32966)
Tenda CP3 is a 3-million-pixel indoor wireless dome camera launched by Tenda. The Tenda CP3 has a stack buffer overflow vulnerability. This vulnerability stems from an issue with the RTSP service’s stack buffer overflow. Attackers can exploit this vulnerability to cause the service program to cra...
IBM API Connect SQL Injection Vulnerability (CNVD-2026-29413)
IBM API Connect is an integrated platform for managing APIs developed by IBM Corporation in the United States. IBM API Connect has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external SQL statements during the password reset function. Attackers can...
Tenda CP3 stack buffer overflow vulnerability (CNVD-2026-32967)
Tenda CP3 is a 3-million-pixel indoor wireless dome camera launched by Tenda. The Tenda CP3 has a stack buffer overflow vulnerability. This vulnerability stems from an overflow in the RTSP service’s stack buffer. Attackers can exploit this vulnerability to construct TEARDOWN requests that cause t...
Tenda CP3 stack buffer overflow vulnerability
Tenda CP3 is a 3-million-pixel indoor wireless dome camera launched by Tenda. The Tenda CP3 has a buffer overflow vulnerability, which stems from an overflow in the RTSP service stack. Attackers can exploit this vulnerability to cause the service program to crash...
Apache IoTDB authorization issue vulnerability (CNVD-2026-28234)
Apache IoTDB is an open-source IoT database developed by the Apache Foundation in the United States. Versions of Apache IoTDB from 1.3.3 to 2.0.8 contained an authorization vulnerability. This vulnerability stemmed from the lack of strict validation of the sessionId parameter by certain Thrift RP...
Vulnerabilities related to Apache IoTDB permissions, permissions management, and access control
Apache IoTDB is an open-source IoT database developed by the Apache Foundation in the United States. There is a security vulnerability in Apache IoTDB. This vulnerability stems from the internal RPC interface used by DataNode to create Trigger instances, which constructs file paths using the...
TP-Link Archer AX20 has a vulnerability related to input validation errors
The TP-Link Archer AX20 is a dual-band wireless router produced by the Chinese company TP-Link. The TP-Link Archer AX20 has a vulnerability related to input validation. This vulnerability stems from improper validation of URLs provided by users via the web interface. Attackers can exploit this...
UTT nv518G gohead/sub_463bbc component has a SQL injection vulnerability
UTT nv518G is an enterprise-level network switch produced by the UTT company in China. The UTT nv518G, with the component gohead/sub463bbc, contains a SQL injection vulnerability. Attackers can exploit this vulnerability to execute arbitrary code...
IBM WebSphere eXtreme Scale code injection vulnerability
IBM WebSphere eXtreme Scale is an elastic data caching and object grid platform developed by American company IBM. IBM WebSphere eXtreme Scale has a code injection vulnerability. This vulnerability stems from the Object Query Language engine, which parses the names of classes provided by attacker...
IBM Watsonx.Data Intelligence Resource Management Error Vulnerability
IBM WatsonXData Intelligence is a data management and analysis platform provided by American company IBM. There is a resource management vulnerability in IBM WatsonX.Data Intelligence, which stems from uncontrolled resource consumption within the application. Attackers can exploit this...
UTT nv518G gohead/sub_448384 component buffer overflow vulnerability
UTT nv518G is an enterprise-level network switch produced by the UTT company in China. The UTT nv518G has a buffer overflow vulnerability in its gohead/sub448384 component. Attackers can exploit this vulnerability to cause a denial-of-service attack...
IBM Watsonx.Data Intelligence cross-site scripting vulnerability
IBM WatsonX.Data Intelligence is a data management and analysis platform provided by American company IBM. IBM WatsonX.Data Intelligence has a cross-site scripting vulnerability. Attackers can exploit this vulnerability to embed arbitrary JavaScript code in the Web UI, thereby altering intended...
Apache HttpComponents Core resource management error vulnerability
Apache HttpComponents Core is an open-source core library for HTTP components developed by the Apache Foundation in the United States. There is a resource management vulnerability in Apache HttpComponents Core. This vulnerability stems from unlimited or throttled resource allocation in the HTTP/2...
IBM Watsonx.Data Intelligence encryption issue vulnerability (CNVD-2026-28486)
IBM WatsonX.Data Intelligence is a data management and analysis platform provided by American company IBM. There are encryption-related vulnerabilities in IBM WatsonX.Data Intelligence, and attackers can exploit these vulnerabilities to obtain sensitive information through man-in-the-middle...
TP-Link Archer C5 has a cross-site scripting vulnerability (CNVD-2026-28254)
The TP-Link Archer C5 is a dual-band wireless router produced by the Chinese company TP-Link. The TP-Link Archer C5 has a cross-site scripting vulnerability. This vulnerability stems from insufficient server-side validation in the web management interface and improper control of user input...
Apache ActiveMQ input validation error vulnerability (CNVD-2026-28238)
Apache ActiveMQ is a message queue middleware developed by the Apache Foundation. There are security vulnerabilities in Apache ActiveMQ. Attackers can exploit these vulnerabilities to enable remote, unauthenticated peers to trigger denial-of-service attacks by sending negative content-length...
IBM WebSphere eXtreme Scale deserialization injection vulnerability
IBM WebSphere eXtreme Scale is an elastic data caching and object grid platform developed by American company IBM. IBM WebSphere eXtreme Scale has a deserialization injection vulnerability, allowing attackers to execute arbitrary code on the grid replication layer...
Apache Camel authorization issue vulnerability (CNVD-2026-28239)
Apache Camel is an enterprise integration framework developed under open source by the Apache Foundation in the United States. There are authorization-related vulnerabilities in Apache Camel. These vulnerabilities stem from improper authentication practices. By default, KeycloakSecurityPolicy ski...
IBM WebSphere eXtreme Scale server request forgeing vulnerability
IBM WebSphere eXtreme Scale is an elastic data caching and object grid platform developed by American company IBM. IBM WebSphere eXtreme Scale has a server-side request forgeing vulnerability. This vulnerability arises from the Java deserialization of approximately 50 CORBA stub classes in the...
Google Chrome Permission Elevation Vulnerability (CNVD-2026-27212)
Chrome is a web browser developed by Google, used for accessing and managing web pages. Google Chrome has a permission escalation vulnerability. This vulnerability arises due to a defect in the handling of permission boundaries by the Bluetooth component when processing Bluetooth interactions wit...
Google Chrome buffer overflow vulnerability (CNVD-2026-27213)
Chrome is a web browser developed by Google, used for accessing and managing web pages. Google Chrome has a buffer overflow vulnerability. This vulnerability arises due to memory processing defects in the V8 component, which handles JavaScript execution processes in HTML pages. Attackers can...
Google Chrome Cross-Site Script Vulnerability (CNVD-2026-27210)
Chrome is a web browser developed by Google, used for accessing and managing web pages. Google Chrome has a cross-site scripting vulnerability. This vulnerability arises due to improper implementation of CSS components when processing page style content. Attackers can exploit this vulnerability b...