Adobe Experience Manager server-side request forgery vulnerability (CNVD-2025-21154)

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. A server-side request forgery vulnerability exists in Adobe...

Tenda W30E formDeleteMeshNode function buffer overflow vulnerability

Tenda W30E is an enterprise-grade wireless router from Tenda Technology designed for SOHO, small and micro businesses and small stores. The Tenda W30E suffers from a buffer overflow vulnerability that originates from the failure of the String parameter in the formDeleteMeshNode function to...

Tenda W30E UploadCfg Function Buffer Overflow Vulnerability

Tenda W30E is an enterprise-grade wireless router from Tenda Technology designed for SOHO, small and micro businesses and small stores. The Tenda W30E suffers from a buffer overflow vulnerability, which originates from the failure of the v17 parameter in the UploadCfg function to properly validat...

Microsoft OfficePlus Spoofing Vulnerability

Microsoft Office is an office software suite product of Microsoft Corporation, USA.OfficePLUS is the official Office plug-in from Microsoft. A spoofing vulnerability exists in Microsoft OfficePlus, which can be exploited by attackers to spoof and obtain sensitive information over the network...

Rockwell Automation FactoryTalk Activation Manager Data Exposure Vulnerability

Rockwell Automation is a leading global provider of industrial automation and control solutions focused on helping companies achieve smart manufacturing and digital transformation. A data disclosure vulnerability exists in Rockwell Automation FactoryTalk Activation Manager, which can be exploited...

Adobe After Effects Out-of-Bounds Read Vulnerability

Adobe After Effects AE for short is a professional film and television post-effects software launched by Adobe in 1993, support for Windows and MacOS dual-platform, mainly for film and television special effects, motion graphics design and video synthesis. Adobe After Effects has an out-of-bounds...

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2025-21150)

Adobe After Effects AE for short is a professional film and television post-effects software launched by Adobe in 1993, support for Windows and MacOS dual-platform, mainly for film and television special effects, motion graphics design and video synthesis. Adobe After Effects has an out-of-bounds...

Adobe Substance3D Modeler Out-of-Bounds Read Vulnerability (CNVD-2025-21418)

Adobe Substance3D Modeler is a 3D modeling software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance3D Modeler, which can be exploited by an attacker to execute code on a system or cause the application to crash...

UTT 1250GW Buffer Overflow Vulnerability

The UTT 1250GW is an enterprise-grade wireless router from Atech Technology Limited UTT designed for small and medium-sized office environments SOHO, focusing on network performance, stability and management features. The UTT 1250GW suffers from a buffer overflow vulnerability that originates fro...

SAP NetWeaver Deserialization Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A deserialization vulnerability exists in SAP NetWeaver, which arises from unsafe deserialization of...

Microsoft Graphics Kernel Code Execution Vulnerability

Microsoft Graphics Kernel is a kernel-mode graphics driver subsystem from Microsoft. A code execution vulnerability exists in Microsoft Graphics Kernel, which can be exploited by an attacker to execute arbitrary code on a system...

UTT 750W Buffer Overflow Vulnerability

The UTT 750W is an enterprise-grade dual-band wireless router from the AiTai UTT brand that supports 2.4GHz and 5GHz bands with wireless transmission rates up to 750Mbps. The UTT 750W suffers from a buffer overflow vulnerability, which originates from the handling of the importpictureurl paramete...

Tenda G3 formDelPortMapping function stack buffer overflow vulnerability

Tenda G3 is a Qos Vpn router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda G3 formDelPortMapping function, which can be exploited by an attacker to cause a denial of service DoS via a specially crafted request...

Adobe Experience Manager Input Validation Error Vulnerability (CNVD-2025-21165)

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. An input validation error vulnerability exists in Adobe...

Adobe Experience Manager Input Validation Error Vulnerability (CNVD-C-2025-521942)

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. An input validation error vulnerability exists in Adobe...

Adobe Experience Manager misauthorization vulnerability (CNVD-2025-21153)

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. A misauthorization vulnerability exists in Adobe Experience...

Tenda G3 formSetStaticRoute function stack buffer overflow vulnerability

Tenda G3 is a Qos Vpn router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda G3 formSetStaticRoute function, which can be exploited by an attacker to cause a denial of service DoS via a specially crafted request...

SAP Fiori App Manage Work Center Groups Cross-Site Request Forgery Vulnerability

SAP Fiori App Manage Work Center Groups is an enterprise application from SAP with the ability to manage and maintain work center groups. A cross-site request forgery vulnerability exists in SAP Fiori App Manage Work Center Groups, which stems from insufficient CSRF protection and can be exploite...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-21391)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to incorrect boundary checking. An attacker can exploit the vulnerability to overflow a buffer and execute arbitrary code on t...

Adobe ColdFusion Path Traversal Vulnerability (CNVD-2025-21409)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from a path traversal vulnerability that can be exploited by an attacker to...

Tenda G3 getsinglepppuser function buffer overflow vulnerability

Tenda G3 is a micro-enterprise all-in-one gateway from Tenda, designed for small and medium-sized businesses to provide an integrated network solution. Tenda G3 has a buffer overflow vulnerability, the vulnerability stems from the pPppUser parameter in the getsinglepppuser function fails to...

TP-LINK AX10 Information Disclosure Vulnerability

The TP-LINK AX10 is a router. The TP-LINK AX10 suffers from an information disclosure vulnerability that is caused by a flaw in the explicit transmission of sensitive information. An attacker can exploit the vulnerability to obtain sensitive information...

Microsoft Sharepoint Remote Code Execution Vulnerability (CNVD-2025-26724)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Unspecified Vulnerability in NVIDIA NVDebug (CNVD-2025-21177)

NVIDIA NVDebug is a debugging and diagnostic tool from NVIDIA. NVIDIA NVDebug contains a security vulnerability that can be exploited by attackers to potentially cause privileged account access, which could lead to code execution, denial of service, elevation of privilege, information disclosure,...

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2025-21151)

Adobe After Effects AE for short is a professional film and television post-effects software launched by Adobe in 1993, support for Windows and MacOS dual-platform, mainly for film and television special effects, motion graphics design and video synthesis. Adobe After Effects has an out-of-bounds...

Adobe Dreamweaver Desktop Cross-Site Request Forgery Vulnerability

Adobe Dreamweaver Desktop is a web design and development software from the American company Audobee Adobe. Adobe Dreamweaver Desktop suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the current user's environme...

Microsoft Office Code Execution Vulnerability (CNVD-2025-26726)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which is caused due to improper boundary checkin...

Adobe Substance3D Viewer Out-of-Bounds Write Vulnerability (CNVD-2025-21423)

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

Adobe Substance3D Viewer Heap Buffer Overflow Vulnerability

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance3D Modeler Code Execution Vulnerability

Adobe Substance3D Modeler is a 3D modeling software from the American company Audobee Adobe. A code execution vulnerability exists in Adobe Substance3D Modeler, which is caused due to an integer overflow error. An attacker can exploit this vulnerability to execute code on the system or cause the...

Fortinet FortiDDoS-F Operating System Command Injection Vulnerability

Fortinet FortiDDoS-F is a distributed denial-of-service protection system from the U.S. company Fiat Fortinet. Fortinet FortiDDoS-F suffers from an operating system command injection vulnerability that stems from improper neutralization of special elements, which can be exploited by an attacker t...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2025-21155)

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. A cross-site scripting vulnerability exists in Adobe Experience...

Adobe Experience ManagerXML Entity Injection Vulnerability

Adobe Experience Manager is a content management solution from Adobe designed to help organizations efficiently create, manage and deliver cross-channel content while integrating business solutions to enhance the customer experience. An XML entity injection vulnerability exists in Adobe Experienc...

Tenda G3 formSetDebugCfg function stack buffer overflow vulnerability

Tenda G3 is a Qos Vpn router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda G3 formSetDebugCfg function, which can be exploited by an attacker to cause a denial of service DoS via a specially crafted request...

Tenda G3 formIPMacBindModify function stack buffer overflow vulnerability

Tenda G3 is a Qos Vpn router from Tenda China. A stack buffer overflow vulnerability exists in the Tenda G3 formIPMacBindModify function, which can be exploited by an attacker to cause a denial of service DoS via a specially crafted request...

Tenda G3 formAddVpnUsers function buffer overflow vulnerability

Tenda G3 is a Qos Vpn router from Tenda China. A buffer overflow vulnerability exists in Tenda G3 v3.0brV15.11.0.17, which is caused by the vpnUsers parameter in the formAddVpnUsers function failing to correctly validate the length of the input data, and can be exploited by an attacker to execute...

Unspecified Vulnerability in SAP NetWeaver Application Server (CNVD-2025-21159)

SAP NetWeaver Application Server is an application server from SAP, Germany. A security vulnerability in SAP NetWeaver Application Server can be exploited by an attacker to potentially cause sensitive information to be read, modified, or deleted...

SAP NetWeaver Application Server Java Access Control Error Vulnerability (CNVD-2025-21204)

SAP NetWeaver Application Server Java is a German SAP SAP company provides a Java runtime environment of the application server. The product is mainly used to develop and run Java EE applications. An Access Control Error vulnerability exists in SAP NetWeaver Application Server Java, which stems...

Ivanti Endpoint Manager Code Execution Vulnerability (CNVD-2025-21272)

Ivanti Endpoint Manager is a unified endpoint management solution for multiple operating systems such as Windows, macOS, Linux, Chrome OS and supports IoT devices. A code execution vulnerability exists in Ivanti Endpoint Manager that stems from a lack of adequate validation of filenames of upload...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-21397)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-21396)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Tenda W30E werlessAdvancedSet Function Buffer Overflow Vulnerability

Tenda W30E is an enterprise-grade wireless router from Tenda Technology designed for SOHO, small and micro businesses and small stores. The Tenda W30E suffers from a buffer overflow vulnerability that originates from the failure of the countryCode parameter in the werlessAdvancedSet function to...

Tenda G3 modifyDhcpRule function buffer overflow vulnerability

Tenda G3 is a micro-enterprise all-in-one gateway from Tenda, designed for small and medium-sized businesses to provide an integrated network solution. Tenda G3 has a buffer overflow vulnerability, the vulnerability stems from the bindDhcpIndex parameter in the modifyDhcpRule function fails to...

Tenda G3 ipMacBindListStore function buffer overflow vulnerability

Tenda G3 is a micro-enterprise all-in-one gateway from Tenda, designed for small and medium-sized businesses to provide an integrated network solution. Tenda G3 has a buffer overflow vulnerability, the vulnerability stems from the listStr parameter in the ipMacBindListStore function fails to...

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23471)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability due to a flaw in the sub415028 function in the goform/setsticleases file. An attacker can exploit the vulnerability to execute arbitrary commands on the system...

Microsoft Office Visio Code Execution Vulnerability

Microsoft Office Visio is a U.S. Microsoft Microsoft Office software series responsible for drawing flowcharts and schematic diagrams in the software. A code execution vulnerability exists in Microsoft Office Visio, which is caused due to improper boundary checking. An attacker could exploit the...

Tenda AC20 Buffer Overflow Vulnerability

Tenda AC20 is a wireless router product from Tenda. A buffer overflow vulnerability exists in Tenda AC20 16.03.08.12 and earlier versions, which originates from the improper handling of the mac parameter in the strcpy function in the /goform/GetParentControlInfo file. The vulnerability can be...

Unspecified Vulnerability in SAP NetWeaver (CNVD-2025-21160)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A security vulnerability exists in SAP NetWeaver, which can be exploited by an attacker to potentially...

Adobe Substance3D Modeler Memory Misreference Vulnerability

Adobe Substance3D Modeler is a 3D modeling software from the American company Audobee Adobe. A code execution vulnerability exists in Adobe Substance3D Modeler, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Premiere Pro Memory Misreference Vulnerability

Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. A memory misreference vulnerability exists in Adobe Premiere Pro, which can be exploited by an attacker to cause arbitrary code to be executed in the current user environment...