WordPress plugin WP Emoticon Rating cross-site request fraud vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the functionality of WordPress. The WP Emoticon Rating plugin has a cross-site reques...

WordPress Plugin Custom Block Builder Cross-Site Script Vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed on a website. The WordPress Plugin Custom Block Builder has a cross-site...

WordPress plugin: WP GDPR Cookie consent and cross-site scripting vulnerabilities

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed on a WordPress site. The WP GDPR Cookie Consent plugin has a cross-site...

Apache HTTP Server memory allocation overflow vulnerability

The Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server features speed, reliability, and the ability to be expanded through simple APIs. There is a vulnerability in Apache HTTP Server where excessive memory allocation exists;...

Apache HTTP Server buffer overflow vulnerability (CNVD-2026-23635)

Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. There is a buffer overflow vulnerability present in Apache HTTP Server, but detailed informatio...

Apache HTTP Server memory error reference vulnerability

The Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. The Apache HTTP Server has a memory corruption vulnerability. Attackers can exploit this...

jflyfox jfinal_cms SQL injection vulnerability

jfinalcms is a content management system used for managing website sections, articles, and feedback content. jflyfox jfinalcms has a SQL injection vulnerability. The vulnerability arises due to the list function in the AdvicefeedbackController.java file not properly filtering the orderBy paramete...

Apache HTTP Server infinite loop vulnerability

Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. There is a bug in Apache HTTP Server involving infinite loops; however, detailed information...

D-Link DWR-M920 has a command injection vulnerability

DWR-M920 is a D-Link wireless router device used for cellular network access and wireless sharing. The D-Link DWR-M920 has a command injection vulnerability. This vulnerability arises due to the sub41C8E8 function in /boafrm/formSmsManage not performing secure filtering on the actionvalue...

D-Link DWR-M920 operating system command injection vulnerability

The D-Link DWR-M920 is a wireless router that provides network connectivity and configuration management functions. The D-Link DWR-M920 has a command injection vulnerability. This vulnerability stems from the sub412DA0 function in the file/boafrm/formIMEISetup failing to properly validate the...

UOS Desktop 20 Professional of Tongxin Software Technology Co., Ltd has a local privilege escalation vulnerability.

Tongxin Software Technology Co., Ltd. hereinafter referred to as “Tongxin Software” is a Chinese operating system development company. It is a national high-tech enterprise and a gazelle enterprise. Its main business includes the research and development of desktop operating systems, server...

Beijing Shenzhou Shihan Technology Co., Ltd. has a SQL injection vulnerability in its multimedia integrated business display system (CNVD-C-2026-269715).

Beijing Shenzhou Shihan Technology Co., Ltd. is a company that specializes in the field of visualization. The multimedia integrated business display system of Beijing Shenzhou Shihan Technology Co., Ltd. has a SQL injection vulnerability, and attackers can exploit this vulnerability to obtain...

Google Chrome Reading List Permission Elevation Vulnerability

Google Chrome is a cross-platform web browser developed by Google, offering fast and secure access to the internet. There is a permission escalation vulnerability in Google Chrome’s Reading List feature on iOS. This vulnerability stems from insufficient validation of untrusted inputs. Attackers c...

Google Android has an unknown vulnerability (CNVD-2026-29296)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from a logical error in the InstallRepository.kt code. Attackers can exploit this vulnerability to gain local privileges...

GPAC Denial-of-Service Vulnerability (CNVD-2026-23411)

GPAC is an open-source multimedia framework developed by GPAC. Versions of GPAC prior to 26.02.0 contained a denial-of-service vulnerability. This vulnerability stemmed from a segmentation violation in the gfisomapplesettagex function. Attackers could exploit this vulnerability to cause a denial ...

Microsoft Azure HorizonDB authentication bypass vulnerability

Microsoft Azure HorizonDB is a cloud-native PostgreSQL database service provided by Microsoft Corporation. There is a security vulnerability in Microsoft Azure HorizonDB, which stems from bypassing authentication through deception. This could allow unauthorized attackers to escalate their...

Google Android DDoS Vulnerability (CNVD-2026-29384)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a denial-of-service vulnerability, which is caused by resource exhaustion in the isSameApp method of the NotificationManagerService.java file. Attackers can exploit this vulnerability to...

Google Android Information Leakage Vulnerability (CNVD-2026-26112)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a vulnerability related to information leakage. This vulnerability arises from logical errors in multiple functions of the KeyguardViewMediator.java file. Attackers can exploit this...

Google Android has an unknown vulnerability (CNVD-2026-29295)

Google Android is an open-source operating system based on Linux, developed by the American company Google. There are security vulnerabilities in Google Android, and attackers can exploit these vulnerabilities to gain local privileges...

Beijing Xin'an Century Technology Co., Ltd.'s AG Security Access Gateway has a command execution vulnerability.

Beijing Xin'an Century Technology Co., Ltd. referred to as Xin'an Century was established in August 2001. It is a leading provider of information security products and solutions in China. Beijing Xin'an Century Technology Co., Ltd. has a command execution vulnerability in its AG security access...

Google Android Permission Elevation Vulnerability (CNVD-2026-29382)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a vulnerability in Google Android, which arises from insufficient permission checks in the setUserDisclaimerAcknowledged method of CarDevicePolicyService.java. Attackers can exploit this...

Google Android Permission Elevation Vulnerability (CNVD-2026-29383)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a vulnerability in Google Android, which is caused by integer overflow in the Framework components. Attackers can exploit this vulnerability to gain higher privileges on the system...

Cisco Webex Meetings Cross-site Scripting Vulnerability (CNVD-2026-25125)

Cisco Webex Meetings is a web-based product that provides online meetings, video conferencing, and collaboration features. Cisco Webex Meetings has a cross-site scripting vulnerability. This vulnerability stems from insufficient validation of user input. An attacker can exploit this vulnerability...

Zyxel VMG4005-B50B buffer overflow vulnerability

Zyxel VMG4005-B50B is a network device firmware designed for managing the network functions and configurations of Zyxel VMG4005-B50B router devices. There is a buffer overflow vulnerability present in Zyxel VMG4005-B50B. This vulnerability stems from the UPnP DeletePortMapping command failing to...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-23388)

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability, which stemmed from the Extensions component being reused after being released. Attackers could exploit this vulnerability to execute arbitrary...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-23387)

Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from insufficient validation of memory usage after the Mojo component was released. Attackers could...

Google Chrome Input Validation Vulnerability (CNVD-2026-23389)

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a vulnerability related to input validation errors, which stemmed from insufficient validation processing by the DataTransfer component for untrusted inputs. Attackers could exploit...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-23390)

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from a problem with the Downloads component, where memory objects were not properly handled during user interactions...

Google Chrome buffer overflow vulnerability (CNVD-2026-23391)

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a buffer overflow vulnerability, which was caused by an out-of-bound read from the GPU component. Attackers could exploit this vulnerability to obtain sensitive information from the...

Zhengfang Software Co., Ltd.'s educational management system has logical defects and vulnerabilities

Positive Software Co., Ltd. hereinafter referred to as "Positive Company" was established in January 1999. It is a software and high-tech enterprise specialized in consulting, planning, construction, and services in the field of higher education informatization. The educational administration...

Siemens RUGGEDCOM RST2428P has unknown vulnerabilities

The Siemens RUGGEDCOM RST2428P is a server communication device produced by the German company Siemens. The Siemens RUGGEDCOM RST2428P has a security vulnerability. This vulnerability arises when an authenticated user modifies certain configurations, causing the application to store sensitive...

Beijing Zhiyuan Internet Software Co., Ltd.'s Zhiyuan A8+ Collaborative Management Software has a vulnerability regarding arbitrary file reading.

Zhiyuan A8+ Collaborative Management Software is designed for groups, international organizations, industrial chains, large organizations, foreign-related work units, and organizational groups. It serves as an integrated portal and work entry point for group-level control and business management...

IBM WebSphere Application Server identity spoofing vulnerability

IBM WebSphere Application Server is a Java enterprise application server developed by IBM. It is primarily used for deploying and managing enterprise-level web applications. IBM WebSphere Application Server has a vulnerability known as “Identity Spoofing.” This vulnerability arises from the failu...

Yot CMS SQL injection vulnerability

Yot CMS is Yot’s content management system, used for website content publishing and page management. Yot CMS has a SQL injection vulnerability. The vulnerability arises due to the lack of proper filtering of SQL query fragments in the aid and cid parameters of the index.php file. Attackers can...

IBM WebSphere Application Server code issue vulnerability (CNVD-2026-23396)

IBM WebSphere Application Server is an enterprise-level Java application server, primarily used for deploying and managing Java EE applications. There are security vulnerabilities in IBM WebSphere Application Server. These vulnerabilities stem from the SAML Web Single Sign-On component, which fai...

IBM WebSphere Application Server security control bypass vulnerability

IBM WebSphere Application Server is an enterprise-level Java application server, primarily used for deploying and running Java enterprise applications. IBM WebSphere Application Server has a security control bypass vulnerability. This vulnerability stems from the improper implementation of securi...

NVIDIA Display Driver Denial-of-Service Vulnerability

NVIDIA Display Driver is a graphics driver developed by NVIDIA Corporation. NVIDIA Display Driver contains security vulnerabilities. Attackers can exploit these vulnerabilities to cause denial-of-service attacks...

Google Chrome WebXR memory error reference vulnerability (CNVD-2026-23392)

Google Chrome is a web browser developed by Google. It supports multi-platform use and emphasizes security and performance. Google Chrome has a memory error reference vulnerability. This vulnerability stems from the WebXR component’s failure to properly handle object lifecycle, resulting in memor...

WordPress Plugins: Events In City Cross-Site Script Vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the functionality of WordPress. The WordPress plugin “Events In City” contains a...

WordPress plugin CM Ad Changer has a cross-site request fraud vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed on a WordPress site. The WordPress plugin CM Ad Changer has a cross-site...

WordPress plugin Endless Scroll cross-site scripting vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed to extend the functionality of the platform. The Endless Scroll plugin has a...

WordPress plugin Easy Prism Syntax Highlighter: Cross-site scripting vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the functionality of WordPress. The WordPress plugin Easy Prism Syntax Highlighter ha...

Google Chrome ANGLE component out-of-bounds write vulnerability (CNVD-2026-23393)

Google Chrome is a cross-platform web browser developed by Google. Google Chrome’s Angular components have a out-of-bounds write vulnerability. This vulnerability stems from improper boundary checking during the processing of HTML pages in versions prior to 148.0.7778.216. Attackers can exploit...

WordPress Plugin: Cryptocurrency Price Comparison Widget Cross-site Script Vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed to enhance the functionality of the platform. The WordPress plugin...

WordPress Plugin Formidable Kinetic Cross-site Scripting Vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed on a WordPress site. The Formidable Kinetic plugin has a cross-site scriptin...

WordPress plugin Dideo cross-site scripting vulnerability

WordPress is a blog platform developed using the PHP language. It allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the functionality of WordPress. The WordPress plugin Dideo has a cross-site scripting vulnerability...

Google Chrome ANGLE Memory Error Reference Vulnerability (CNVD-2026-23395)

Google Chrome is a web browser developed by Google, primarily used for accessing the internet and running web applications. A vulnerability exists in Google Chrome related to memory references. This vulnerability stems from issues with memory references, and attackers can exploit it to achieve...

Google Chrome Bluetooth module memory error and reference vulnerability

Google Chrome is a cross-platform web browser developed by Google. It primarily provides features for web browsing, extension support, and tab management. Google Chrome has a memory error reference vulnerability, which stems from improper management of object lifetimes by the Bluetooth module,...

Beijing Shenzhou Shihan Technology Co., Ltd. has a SQL injection vulnerability in its multimedia integrated business display system (CNVD-C-2026-244712).

Beijing Shenzhou Shihan Technology Co., Ltd. is a company that specializes in the field of visualization. The multimedia integrated business display system of Beijing Shenzhou Shihan Technology Co., Ltd. has a SQL injection vulnerability, and attackers can exploit this vulnerability to obtain...

WordPress plugin Felan Framework cross-site scripting vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the functionality of WordPress. The WordPress plugin Felan Framework has a cross-site...