IBM Watsonx.Data intelligence log information leakage vulnerability

IBM WatsonX.Data Intelligence is a data management and analysis platform provided by American company IBM. IBM WatsonX.Data Intelligence has a vulnerability related to log information leakage. This vulnerability stems from the disclosure of detailed technical error messages. Attackers can exploit...

UTT nv518G sub_444C8C component buffer overflow vulnerability

UTT nv518G is an enterprise-level network switch produced by the UTT company in China. The UTT nv518G sub444C8C component has a buffer overflow vulnerability, which can be exploited by attackers to cause a denial-of-service attack...

IBM Watsonx.Data Intelligence Server Request Forgery Vulnerability (CNVD-2026-28621)

IBM WatsonXData Intelligence is a data management and analysis platform provided by American company IBM. IBM WatsonX.Data Intelligence has a server-side request forgeing vulnerability. This vulnerability arises from the lack of sufficient verification mechanisms on the server to confirm the orig...

IBM WebSphere eXtreme Scale resource management error vulnerabilities

IBM WebSphere eXtreme Scale is an elastic data caching and object grid platform developed by American company IBM. There is a resource management vulnerability in IBM WebSphere eXtreme Scale, which stems from improper validation by the XDF decoder. Attackers can exploit this vulnerability to...

IBM Watsonx.Data Intelligence cross-site scripting vulnerability (CNVD-2026-28620)

IBM Watsonx.Data Intelligence is a data management and analysis platform provided by American company IBM. IBM Watsonx.Data Intelligence has a cross-site scripting vulnerability. This vulnerability stems from the application’s lack of effective filtering and escaping of data provided by users...

Apache ActiveMQ authorization issue vulnerability (CNVD-2026-28237)

Apache ActiveMQ is a message queue middleware developed by the Apache Foundation. There is an authorization issue vulnerability in Apache ActiveMQ. Attackers can exploit this vulnerability to have different connections consume the temporary destination of another connection...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27211)

Chrome is a web browser developed by Google, used for accessing and managing web pages. Google Chrome has a resource management vulnerability. The vulnerability arises from the DevTools component incorrectly using released memory when handling the lifecycle of debugging objects. Attackers can...

Huawei openGauss resource management error vulnerability

Huawei openGauss is an open-source relational database management system developed by Huawei Technologies of China. It features multi-core high performance, full-link security, and intelligent operations management. There is a resource management vulnerability in Huawei openGauss. This...

Google Chrome buffer overflow vulnerability (CNVD-2026-27209)

Chrome is a web browser developed by Google, used for accessing and managing web pages. Google Chrome has a buffer error vulnerability. The vulnerability arises due to a memory access flaw in the ANGLE component, which leads to out-of-bounds memory reads and writes during processing graphic...

Adobe ColdFusion path traversal vulnerability (CNVD-2026-26845)

Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a path traversal vulnerability, which stems from improper path name filtering. Attackers can exploit this vulnerability to access files and directories that are not intend...

Adobe ColdFusion arbitrary file upload vulnerability (CNVD-2026-26852)

Adobe ColdFusion is a rapid web application development platform provided by Adobe, Inc. ColdFusion has a vulnerability related to arbitrary file uploads. This vulnerability stems from improper file upload restrictions, and attackers can exploit this vulnerability to execute arbitrary code within...

Adobe ColdFusion arbitrary file upload vulnerability

Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a vulnerability related to arbitrary file uploads. This vulnerability stems from the upload of dangerous types of files without restrictions, allowing attackers to execute...

Adobe ColdFusion input validation error vulnerability (CNVD-2026-26850)

Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a vulnerability related to input validation, and attackers can exploit this vulnerability to execute arbitrary code within the context of the current user...

Adobe ColdFusion path traversal vulnerability (CNVD-2026-26849)

Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a path traversal vulnerability; this vulnerability stems from path traversal issues, and attackers can exploit it to execute arbitrary code within the context of the curre...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27218)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the Dawn component on the Mac platform, where objects continue to be used after being released. Attackers...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27217)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the ANGLE component, where objects continue to be used after being released. Attackers can exploit this...

Google Chrome heap buffer overflow vulnerability (CNVD-2026-27215)

Google Chrome is a web browser used for accessing web pages and running web applications. Google Chrome has a heap buffer overflow vulnerability. This vulnerability arises due to a flaw in the Skia component that leads to heap buffer overflows. Attackers can exploit this vulnerability to escape t...

Google Chrome Input Validation Vulnerability (CNVD-2026-26945)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a vulnerability in Google Chrome’s input validation mechanism. The vulnerability stems from memory processing defects in the V8 engine. Attackers can exploit this vulnerability by constructing HTML...

Adobe ColdFusion input validation error vulnerability (CNVD-2026-26851)

Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a vulnerability related to input validation, and attackers can exploit this vulnerability to execute arbitrary code within the context of the current user...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27214)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the V8 engine, where objects continue to be used after being released. Attackers can exploit this...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-27216)

Google Chrome is a web browser used for accessing web pages and running web applications. There is a resource management vulnerability in Google Chrome. The vulnerability stems from a flaw in the V8 engine that allows objects to be reclaimed and then reused after their release. Attackers can...

Beijing StarNet Jet Networks Technology Co., Ltd.'s ASME access shared management engine has a command execution vulnerability.

ASME Access Shared Management Engine is a proxy prevention product based on DPI application layer detection. Beijing Starnet Netcom Technology Co., Ltd.'s ASME Access Shared Management Engine has a command execution vulnerability, allowing attackers to execute arbitrary commands using this...

Apache ActiveMQ authorization issue vulnerability (CNVD-2026-28240)

Apache ActiveMQ is a message queue middleware product developed by the Apache Foundation. There is an authorization issue in Apache ActiveMQ; this vulnerability stems from improper authorization practices. As a result, low-privilege Web Console users who are authenticated may have access to the...

Siemens Mendix Studio Pro arbitrary code execution vulnerability

Mendix Studio Pro is a low-code IDE designed for professional developers. It is a visual model-driven development environment used to build applications on the Mendix platform. Siemens Mendix Studio Pro has a vulnerability where arbitrary code can be executed. Attackers can exploit this...

Apache ActiveMQ resource management error vulnerability (CNVD-2026-28242)

ActiveMQ is an open-source messaging middleware from Apache, used for message queues and asynchronous communication. There is a resource management vulnerability in Apache ActiveMQ. The vulnerability arises because the size value in the WireFormatInfo frame is not verified during the authenticati...

Apache ActiveMQ resource management error vulnerability (CNVD-2026-28243)

ActiveMQ is an open-source messaging middleware from Apache, used for message queues and asynchronous communication. There is a resource management vulnerability in Apache ActiveMQ. The vulnerability arises due to the lack of validation of the encoding size values during the deserialization of...

Tenda JD12L buffer overflow vulnerability

JD12L is a Tenda wireless router device, used for home and small network access. The Tenda JD12L has a buffer overflow vulnerability. This vulnerability arises due to the lack of length validation for the security5g parameter in the formWifiBasicSet function of the /goform/WifiBasicSet interface...

Apache ActiveMQ resource management error vulnerability (CNVD-2026-28241)

ActiveMQ is an open-source messaging middleware from Apache, used for message queues and asynchronous communication. There is a resource management vulnerability in Apache ActiveMQ. The vulnerability arises due to the STOMP NIO codec’s ability to infinitely buffer unterminated header bytes...

Apple Safari resource management error vulnerability (CNVD-2026-28250)

Apple Safari is a web browser developed by Apple Inc., primarily designed for browsing internet pages and rendering web content. Apple Safari has a resource management vulnerability, which stems from improper memory management leading to memory-related errors. Attackers can exploit this...

Google Android has an unknown vulnerability (CNVD-2026-26390)

Google Android is an operating system based on Linux, open-sourced by Google Inc. There are security vulnerabilities in Google Android, which stem from a lack of boundary checks in the mfccorenalqgetdecmetadataseinal function in mfccorenal.q. Attackers can exploit these vulnerabilities to execute...

Tenda jd12l stack buffer overflow vulnerability (CNVD-2026-32968)

The Tenda jd12l is a multi-antenna wireless router designed for home users. The Tenda jd12l has a stack buffer overflow vulnerability. This vulnerability stems from the fromNatStaticSetting function in the goform/NatStaticSetting file, which fails to properly validate the page parameter. Attacker...

Multiple Mozilla product information leakage vulnerabilities (CNVD-2026-26879)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Apple Safari resource management error vulnerability (CNVD-2026-28244)

Apple Safari is a web browser available for iOS, iPadOS, and macOS platforms, primarily used for accessing internet content. Apple Safari has a resource management vulnerability, which stems from memory error references during processing of maliciously crafted web content. Attackers can exploit...

Multiple Mozilla products have buffer overflow vulnerabilities (CNVD-2026-26388)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. Several Mozilla products have buffer overflow vulnerabilities...

Multiple Mozilla product code execution vulnerabilities (CNVD-2026-26877)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Cisco Identity Services Engine Software Authorization Vulnerability

Cisco Identity Services Engine Software is a identity management platform developed by the American company Cisco. There are authorization-related vulnerabilities in Cisco Identity Services Engine Software. These vulnerabilities stem from improper authorization checks during resource access...

Multiple Mozilla product information leakage vulnerabilities (CNVD-2026-26880)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Multiple Mozilla products have buffer overflow vulnerabilities (CNVD-2026-26389)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. Several Mozilla products have buffer overflow vulnerabilities...

Apache Shiro input validation vulnerability (CNVD-2026-26205)

Apache Shiro is a security and permission framework that is open-source under the Apache Foundation in the United States. There is an input validation vulnerability in Apache Shiro. This vulnerability stems from the lack of escaping of special characters according to RFC 2253 in the...

Google Android Authorization Vulnerability (CNVD-2026-26201)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to cause local information leaks...

Google Android Configuration Error Vulnerability

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a configuration vulnerability that stems from unsafe default values in the NfcDispatcher.java file. Attackers can exploit this vulnerability to gain local privileges...

Multiple Mozilla products have buffer overflow vulnerabilities (CNVD-2026-26884)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Google Android Authorization Vulnerability (CNVD-2026-29385)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has vulnerabilities related to authorization, and attackers can exploit these vulnerabilities to cause local information leaks...

Multiple Mozilla products have service denial vulnerabilities (CNVD-2026-26374)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that was separated from the Mozilla Application Suite. Several Mozilla products have denial-of-service vulnerabilities, whic...

Google Android competition conditions issue vulnerability (CNVD-2026-26393)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a vulnerability known as a race condition. This vulnerability stems from a persistent synchronization issue within the createSessionInternal function in PackageInstallerService.java...

Multiple Mozilla products have buffer overflow vulnerabilities (CNVD-2026-26886)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Apple Safari buffer overflow vulnerability (CNVD-2026-26436)

Apple Safari is a web browser developed by Apple Inc., primarily used on iOS, iPadOS, and macOS systems. Apple Safari has a buffer overflow vulnerability, which stems from an inability to properly validate boundaries. Attackers can exploit this vulnerability by processing maliciously crafted web...

Google Chrome Authorization Vulnerability (CNVD-2026-26521)

Google Chrome is a cross-platform web browser developed by Google Inc. of the United States. There is a security vulnerability in Google Chrome. This vulnerability stems from improper handling of passwords in the Password module. Attackers can exploit this vulnerability to leak cross-source data...

Google Chrome Input Validation Vulnerability (CNVD-2026-26522)

Google Chrome is a cross-platform web browser developed by Google Inc. of the United States. There is a security vulnerability in Google Chrome. This vulnerability stems from improper implementations in extensions. Attackers can exploit this vulnerability to bypass the origin policy using a...

Apple Safari Content Resource Management Error Vulnerability (CNVD-2026-26337)

Apple Safari is a web browser developed by Apple, primarily used on iOS, iPadOS, and macOS systems. There is a resource management vulnerability in Apple Safari. This vulnerability stems from improper handling of memory management; attackers can exploit this vulnerability to cause Safari to crash...