Beijing Shenzhou Shihan Technology Co., Ltd. has a SQL injection vulnerability in its multimedia integrated business display system (CNVD-C-2026-244712).

Beijing Shenzhou Shihan Technology Co., Ltd. is a company that specializes in the field of visualization. The multimedia integrated business display system of Beijing Shenzhou Shihan Technology Co., Ltd. has a SQL injection vulnerability, and attackers can exploit this vulnerability to obtain...

WordPress Plugin: Cryptocurrency Price Comparison Widget Cross-site Script Vulnerability

WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed to enhance the functionality of the platform. The WordPress plugin...

MTGPU of Moore Threading Technologies (Beijing) Co., Ltd. has a permission escalation vulnerability (CNVD-2026-22916).

Mole Thready Intelligence Technology Beijing Co., Ltd. is a company whose business involves the development of full-featured GPU chips and AI computing solutions, serving organizations in the field of digital transformation. Mole Thready Intelligence Technology Beijing Co., Ltd. has a permission...

Beijing Anbo Tong Technology Co., Ltd.'s next-generation firewall has a command execution vulnerability

Beijing Anbotong Technology Co., Ltd. referred to as “Anbotong” is committed to becoming a leader in building a secure computing power ecosystem in the AI era. Its independently developed ABT SPOS visual network security system platform has become a widely adopted network security suite by many...

IBM Db2 range partitioned tables denial-of-service vulnerability (CNVD-2026-23402)

IBM Db2 is a relational database management system developed by IBM. It is primarily used for data storage, querying, and analysis. IBM Db2 has a denial-of-service vulnerability that arises from improper handling of specially crafted queries involving range partition tables during execution...

IBM Langflow OSS file processing component path traversal vulnerability

IBM Langflow OSS is an open-source low-code tool primarily used for building and deploying applications based on Large Language Models LLMs. IBM Langflow OSS has a path traversal vulnerability. This vulnerability stems from the failure to properly validate symbolic links during the decompression ...

IBM App Connect Enterprise log file information leakage vulnerability

IBM App Connect Enterprise is an application integration and enterprise messaging platform, primarily used for connecting different applications and data sources. IBM App Connect Enterprise has a vulnerability related to information leakage. This vulnerability stems from the program storing...

IBM Aspera HSTS for CP4I certification bypass vulnerability

IBM Aspera HSTS for CP4I is a solution for high-speed and secure file transfer, primarily providing features for large-scale data transmission, encryption, and automated workflows. IBM Aspera HSTS for CP4I has a certification bypass vulnerability. This vulnerability arises due to the authenticati...

Changsha Metinfo Information Technology Co., Ltd. has a SQL injection vulnerability

MetInfo is an open-source CMS enterprise website building system that can be used for commercial websites without violating licensing agreements. Changsha Mitop Information Technology Co., Ltd.'s MetInfo has a SQL injection vulnerability, and attackers can exploit this vulnerability to access...

Microsoft UFO Shell Action Replay operating system command injection vulnerability

Microsoft UFO is an open-source framework used for intelligent automation across devices and platforms. Microsoft UFO has a vulnerability related to operating system command injection. This vulnerability stems from ShellReceiver.runshell, which fails to properly handle the action parameter. It...

IBM Db2 Denial-of-Service Vulnerability (CNVD-2026-23403)

IBM Db2 is a relational database management system, primarily used for data storage, querying, and management. IBM Db2 has a denial-of-service vulnerability. This vulnerability arises from improper handling of specially crafted heap queries. Attackers can exploit this vulnerability to cause the...

ZTE ZXUniPOS NDS-LTE access control vulnerability

ZTE ZXUniPOS NDS-LTE is a modular baseband unit designed for wireless communication networks. It primarily provides multi-mode and multi-frequency signal processing as well as data aggregation functions. ZTE ZXUniPOS NDS-LTE has an access control vulnerability. This vulnerability arises from the...

MTGPU of Moore Threading Technologies (Beijing) Co., Ltd. has a permission escalation vulnerability (CNVD-2026-22915).

Mole Thready Intelligence Technology Beijing Co., Ltd. is a company whose business involves the development of full-featured GPU chips and AI computing solutions, serving organizations in the field of digital transformation. Mole Thready Intelligence Technology Beijing Co., Ltd. has a permission...

IBM OPENBMC Denial-of-Service Vulnerability

IBM OpenBMC is an open-based board management controller firmware, primarily used for server hardware monitoring and management. IBM OpenBMC has a denial-of-service vulnerability. The vulnerability arises from the failure to properly validate requests from unauthenticated network users. Attackers...

Beijing YishengERP

Diankeyun ERP is an inventory management system developed using thinkPHP and LAYUI. Beijing Yisheng Internet Technology Co., Ltd.'s Diankeyun ERP has logical defects and vulnerabilities. Attackers can exploit these vulnerabilities to add users...

Beijing YishengERP

Diankeyun ERP is an inventory management system developed using thinkPHP + LAYUI. Beijing Yisheng Internet Technology Co., Ltd.'s Diankeyun ERP has a directory traversal vulnerability, allowing attackers to obtain sensitive information through this vulnerability...

Google Chrome Override Read Vulnerability (CNVD-2026-29381)

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a cross-origin data leakage vulnerability, allowing attackers to exploit this vulnerability to leak cross-origin data through specially crafted HTML pages...

Beijing YishengERPSQL

Diankeyun ERP is an inventory management system developed using thinkPHP and LAYUI. Beijing Yisheng Internet Technology Co., Ltd.'s Diankeyun ERP has a SQL injection vulnerability, allowing attackers to obtain sensitive database information...

ZTE MU5250 Access Control Vulnerability

The ZTE MU5250 is a 5G mobile Wi-Fi device produced by ZTE Corporation. The ZTE MU5250 has a vulnerability related to access control. This vulnerability stems from improper configuration of the access control mechanism. Attackers can exploit this vulnerability to obtain information without proper...

Shanghai Lingdang Information Technology Co., Ltd.'s Lingdang CRM has a SQL injection vulnerability (CNVD-C-2026-242520).

Lingdang CRM is a CRM software developed by Shanghai Lingdang Information Technology Co., Ltd. It is suitable for small and medium-sized enterprises that primarily engage in sales and service businesses. Shanghai Lingdang Information Technology Co., Ltd.’s Lingdang CRM has a SQL injection...

Microsoft Office SharePoint code-related vulnerabilities

Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. There is a security vulnerability present in Microsoft Office SharePoint. Attackers can exploit this vulnerability to execute code via the network...

Shenzhen Meikexing Communication Technology Co., Ltd.'s MW330R has a binary vulnerability

The MW330R is an 11N wireless broadband router. The MW330R from Shenzhen Meikexing Communication Technology Co., Ltd has a binary vulnerability that can be exploited by attackers to cause a denial-of-service attack...

Microsoft Malware Protection Engine heap buffer overflow vulnerability

The Microsoft Malware Protection Engine is a core component developed by Microsoft for malware protection, used to scan and detect malicious code. The Microsoft Malware Protection Engine has a heap buffer overflow vulnerability. This vulnerability arises from improper handling of input data,...

Cisco ThousandEyes Enterprise Agent BrowserBot component has a command injection vulnerability

Cisco ThousandEyes Enterprise Agent is an enterprise network monitoring tool, primarily used for monitoring network performance and application experiences. The Cisco ThousandEyes Enterprise Agent has a command injection vulnerability. This vulnerability stems from insufficient validation of...

Cisco Secure Workload Access Control Vulnerability

Cisco Secure Workload is a software product developed by Cisco, Inc., in the United States. It allows users to install software agents on their application workloads. Cisco Secure Workload has a security vulnerability related to access control. This vulnerability stems from insufficient access...

Siemens Teamcenter Cross-site Scripting Vulnerability

Siemens Teamcenter is a software application for product lifecycle management developed by the German company Siemens. Siemens Teamcenter has a cross-site scripting vulnerability. This vulnerability arises because the affected applications fail to properly encode or filter data provided by users...

Siemens RUGGEDCOM operating system command injection vulnerability

Siemens RUGGEDCOM is a communication device developed by the German company Siemens. It provides fast and reliable communication for industries such as power, transportation, oil, and gas. Siemens RUGGEDCOM has a vulnerability related to operating system command injection. This vulnerability aris...

Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability

Cisco Catalyst SD-WAN Manager is a highly customizable dashboard provided by Cisco. It simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. Cisco Catalyst SD-WAN Manager has an XML external entity injection vulnerability. This vulnerability stems from...

Siemens ROS# Path traversal vulnerability

Siemens ROS is a robot operating system communication framework based on C and .NET by the German company Siemens. Siemens ROS has a path traversal vulnerability, which arises from incorrect user input that leads to path traversal. Attackers can exploit this vulnerability to access any file on th...

Zyxel NWA1100-N buffer overflow vulnerability

The Zyxel NWA1100-N is a wireless access point manufactured by the Chinese company Zyxel. The Zyxel NWA1100-N 1.00AACE.1C0 version contains a buffer overflow vulnerability. This vulnerability arises from insufficient validation of the length of input data in functions such as formWep, formWlAc,...

Fortinet FortiMail SQL injection vulnerability (CNVD-2026-25591)

Fortinet FortiMail is a set of email security gateway products developed by the American company Fortinet. This product provides features such as email security protection and data protection. Fortinet FortiMail has a SQL injection vulnerability. This vulnerability stems from improper...

Siemens RUGGEDCOM operating system command injection vulnerability (CNVD-2026-23336)

Siemens RUGGEDCOM is a communication device developed by the German company Siemens. It provides fast and reliable communication for industries such as power, transportation, oil, and gas. Siemens RUGGEDCOM has a vulnerability related to operating system command injection. This vulnerability aris...

Fortinet FortiNDR SQL injection vulnerability (CNVD-2026-25592)

Fortinet FortiNDR is a network detection and response solution provided by the American company Fortinet. Fortinet FortiNDR has a SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands. Attackers can exploit this vulnerability to execu...

Zyxel WRE6505 Access Control Vulnerability

The Zyxel WRE6505 is a wireless signal expansion device produced by the Chinese company Zyxel. The Zyxel WRE6505 v2 V1.00ABDV.3C0 version contains an access control vulnerability. This vulnerability stems from improper restrictions on the number of authentication attempts made by the web manageme...

Kuicms PHP EE cross-site scripting vulnerability

Kuicms Php EE is a PHP enterprise website content management system developed by Kuicms Corporation. Version 2.0 of Kuicms Php EE contains a cross-site scripting vulnerability. This vulnerability stems from insufficient filtering and escaping of data provided by users. Attackers can exploit this...

Fortinet FortiOS buffer overflow vulnerability (CNVD-2026-25593)

Fortinet FortiOS is a security operating system developed by Fortinet, a US-based company, and specifically designed for use on the FortiGate network security platform. This system offers users various security features, including firewalls, antivirus protection, IPSec/SSLVPN, web content...

Siemens SIMATIC CN 4100 resource exhaustion vulnerability

The Siemens SIMATIC CN 4100 is a communication node developed by the German company Siemens. The Siemens SIMATIC CN 4100 has a resource exhaustion vulnerability. This vulnerability arises from improper resource management when processing a large number of TCP SYN packets. Attackers can exploit th...

Siemens RUGGEDCOM ROX parameter injection vulnerability

Siemens RUGGEDCOM ROX is a dedicated operating system developed by Siemens for its industrial communication devices. It primarily runs on RUGGEDCOM series of industrial Ethernet switches, routers, and multi-service platforms. Siemens RUGGEDCOM ROX has a parameter injection vulnerability; this...

Zyxel WRE6505 operating system command injection vulnerability

The Zyxel WRE6505 is a wireless signal expansion device produced by the Chinese company Zyxel. The Zyxel WRE6505 has an operating system command injection vulnerability. This vulnerability arises from the CGI program’s failure to properly filter special characters and commands constructed in...

Siemens Solid Edge buffer overflow vulnerability (CNVD-2026-23467)

Siemens Solid Edge is a 3D CAD software developed by the German company Siemens. This software can be used for part design, assembly design, sheet metal design, welding design, and other industries. Siemens Solid Edge has a buffer overflow vulnerability; this vulnerability stems from the lack of...

CouchCMS cross-site scripting vulnerability

CouchCMS is an open-source content management system CMS designed for designers. Version 2.2.1 of CouchCMS contains a cross-site scripting vulnerability. This vulnerability stems from the application’s lack of effective filtering and escaping of data provided by users. Attackers can exploit this...

Fortinet FortiAuthenticator Access Control Vulnerability (CNVD-2026-25590)

Fortinet FortiAuthenticator is a centralized user identity management solution provided by the American company Fortinet. There is an access control vulnerability in Fortinet FortiAuthenticator. This vulnerability stems from improper access control; attackers can exploit this vulnerability to...

Fortinet FortiAP operating system command injection vulnerability (CNVD-2026-25589)

Fortinet FortiAP is a controller developed by the American company Fortinet, used for managing wireless access point devices. There are vulnerabilities related to operating system command injection in Fortinet FortiAP and FortiAP-W2. These vulnerabilities stem from improper neutralization of...

Siemens Solid Edge stack buffer overflow vulnerability (CNVD-2026-23468)

Siemens Solid Edge is a 3D CAD software developed by the German company Siemens. This software can be used for parts design, assembly design, sheet metal design, welding design, and other industries. Siemens Solid Edge has a stack buffer overflow vulnerability, which allows attackers to execute...

Siemens SIMATIC HMI Comfort Panels have undisclosed vulnerabilities

Siemens SIMATIC HMI Comfort Panels are touchscreen devices produced by the German company Siemens. Siemens SIMATIC HMI Comfort Panels have security vulnerabilities. These vulnerabilities stem from improper restrictions on access to web browsers through the control panel. Unauthorized attackers ca...

BloofoxCMS Cross-Site Request Forgery Vulnerability

BloofoxCMS is a PHP-based text content management system. The bloofoxCMS 0.5.2.1 version has a cross-site request forgeing vulnerability. This vulnerability arises from the WEB application not properly verifying whether the request comes from a trusted user. Attackers can exploit this vulnerabili...

Siemens Teamcenter Trust Management Vulnerability

Siemens Teamcenter is a software application for product lifecycle management developed by the German company Siemens. Siemens Teamcenter has a vulnerability related to trust management. This vulnerability stems from the use of hardcoded keys for obfuscation. Attackers can exploit this...

Textpattern CMS file upload vulnerability

Textpattern CMS is a content management system based on PHP. Version 4.8.7 of Textpattern CMS has a file upload vulnerability. This vulnerability arises from the lack of strict validation or filtering during file uploads by users. Attackers can exploit this vulnerability to execute arbitrary...

Mozilla Firefox has an unknown vulnerability (CNVD-2026-23639)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. There are security vulnerabilities in Mozilla Firefox, which stem from issues with the JavaScript Engine component. Currently, no detailed information about these vulnerabilities is available...

Microsoft Office Exploitation Vulnerability (CNVD-2026-23631)

Microsoft Office is a suite of office software products developed by the American company Microsoft. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. Microsoft Office has a deception vulnerability that attackers can exploit to carry out deceptive attacks...