Adobe Animate post-release reuse vulnerability (CNVD-2025-20477)

Adobe Animate is a professional 2D animation software developed by Adobe, formerly known as Flash Professional, which supports HTML5, WebGL and other formats, and is widely used in game development, web design and interactive content creation. Adobe Animate suffers from a post-release reuse...

Intel Tiber Edge Platform Edge Orchestrator Information Disclosure Vulnerability

Intel Tiber Edge Platform Edge Orchestrator is an edge computing platform from Intel designed to simplify the edge application development and deployment process by supporting modular tools to build and run edge applications. Intel Tiber Edge Platform Edge Orchestrator suffers from an information...

Intel Distribution for Python Improper Privileges Vulnerability

Intel Distribution for Python is the official Python distribution from Intel, designed to improve the performance of Python code by optimizing high-performance mathematical and scientific computing libraries, with support for multi-core CPUs and the latest instruction set acceleration. Intel...

Intel Tiber Edge Platform Edge Orchestrator Denial of Service Vulnerability (CNVD-2025-19834)

Intel Tiber Edge Platform Edge Orchestrator is an edge computing platform from Intel designed to simplify the edge application development and deployment process by supporting modular tools to build and run edge applications. Intel Tiber Edge Platform Edge Orchestrator suffers from a denial of...

Adobe Illustrator Stack Buffer Overflow Vulnerability

Adobe Illustrator is an industry-standard vector graphic design software developed by Adobe, mainly used for creating and editing vector graphics, illustrations, logo design, etc., widely used in publishing, multimedia and online image fields. Adobe Illustrator suffers from a stack buffer overflo...

Ivanti Avalanche SQL Injection Vulnerability

Ivanti Avalanche is an enterprise mobile device management system from Ivanti for managing mobile devices such as smartphones and tablets. Ivanti Avalanche suffers from a SQL injection vulnerability that originates when the program does not properly validate user-entered SQL statements, which can...

Medical Store Management System ChangePassword.java SQL Injection Vulnerability

Medical Store Management System is a pharmacy management system. The Medical Store Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter newPassTxt in the file ChangePassword.java. An attacker can...

Apache Tomcat Authorization Problem Vulnerability (CNVD-2025-19105)

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server for the implementation of Servlet and JavaServer Page JSP support. Apache Tomcat suffers from an authorization problem vulnerability that stems from a rewrite valve session fixation flaw. An attack...

WellChoose Organization Portal System Cross-Site Scripting Vulnerability

WellChoose Organization Portal System is an electronic directory service system from WellChoose in Taiwan, China. A cross-site scripting vulnerability exists in the WellChoose Organization Portal System that can be exploited by an attacker to execute arbitrary JavaScript code in a user's browser...

Apache Superset Information Disclosure Vulnerability (CNVD-2025-19102)

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from an information disclosure vulnerability that stems from the /chart/data endpoint response containing underlying query information, which can be exploited by an attack...

Apache Tomcat Denial of Service Vulnerability (CNVD-2025-19106)

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server for the implementation of Servlet and JavaServer Page JSP support. Apache Tomcat suffers from a denial of service vulnerability due to a forced reset attack in the HTTP/2 implementation. An attacke...

Intel DSA Search Path Uncontrolled Vulnerability

Intel DSA is a hardware gas pedal built into Intel® Xeon® Scalable processors that accelerates storage, networking, and data analytics workloads by offloading data transfer tasks to dedicated hardware, freeing up CPU resources for other tasks. Intel DSA suffers from an uncontrolled search path...

DELL OpenManage Enterprise Information Disclosure Vulnerability

DELL OpenManage Enterprise is an enterprise-class systems management console from Dell designed to simplify IT infrastructure management and support centralized lifecycle management of PowerEdge servers, storage, network devices and third-party components. An information disclosure vulnerability...

Netis WF2880 FUN_00471994 Function Buffer Overflow Vulnerability

The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 FUN00471994 function, which can be exploited by an attacker to cause a denial of service...

Simple Cafe Ordering System portal.php File SQL Injection Vulnerability

Simple Cafe Ordering System is a simple coffee ordering system. Simple Cafe Ordering System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter ID of the file /portal.php. An attacker can exploit this...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2025-27459)

Foxit PDF Reader is a Chinese Foxit Foxit company's a PDF document reader. Foxit PDF Reader suffers from a buffer overflow vulnerability that originates from an uninitialized pointer, which can be exploited by an attacker to obtain system privileges and modify the system configuration by executin...

Delta Electronics DTN Soft Code Execution Vulnerability

Delta Electronics DTN Soft is a temperature controller software from Delta Electronics China. A security vulnerability exists in Delta Electronics DTN due to an insecure deserialization flaw in the handling of project files. An attacker can exploit the vulnerability to execute arbitrary code on t...

Tenda AC20 Buffer Overflow Vulnerability (CNVD-2025-19580)

The Tenda AC20 is a wireless router from the Chinese company Tenda. Tenda AC20 suffers from a buffer overflow vulnerability, which originates from the parameter Time in the file /goform/saveParentControlInfo that fails to correctly validate the length and size of the input data, which can be...

Tenda AC20 Command Injection Vulnerability

The Tenda AC20 is a wireless router from the Chinese company Tenda. The Tenda AC20 suffers from a command injection vulnerability that originates from the websFormDefine function in the /goform/telnet file failing to properly filter constructor command special characters, commands, etc. This...

Job Diary admin-inbox.php file SQL injection vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID in the file /admin-inbox.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

WordPress B Slider plugin information disclosure vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress B Slider plugin has an information disclosure vulnerability, the vulnerability stems from a sensitive information disclosure in the getactiveplugins function, which ca...

Hostel Management System hostel_manage.exe File Stack Buffer Overflow Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a stack buffer overflow vulnerability that stems from the parameter uname in the file hostelmanage.exe not properly validating the length of input data, which can be exploited by an attacker to cause a...

Intel Clock Jitter Tool Elevation of Privilege Vulnerability

Intel Clock Jitter Tool is a clock jitter analysis tool developed by Intel based on mathematical physics methodology. Intel Clock Jitter Tool suffers from an elevation of privilege vulnerability that stems from an uncontrolled search path, which can be exploited by an attacker to cause an elevati...

Intel Tiber Edge Platform Edge Orchestrator Denial of Service Vulnerability (CNVD-2025-19837)

Intel Tiber Edge Platform Edge Orchestrator is an edge computing platform from Intel designed to simplify the edge application development and deployment process by supporting modular tools to build and run edge applications. Intel Tiber Edge Platform Edge Orchestrator suffers from a denial of...

Adobe Substance 3D Stager out-of-bounds write vulnerability (CNVD-2025-24439)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the context of the current user...

Zoo Management System admin/add-foreigner-ticket.php File Cross-Site Scripting Vulnerability

Zoo Management System is a zoo management system. Zoo Management System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter visitorname in the file /admin/add-foreigner-ticket.php, which can be...

Hospital Management System edit-doctor.php file SQL Injection Vulnerability

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter docfees in the file /admin/edit-doctor.php. An...

Tenda AC20 Hardcoded Credentials Vulnerability

Tenda AC20 is a home router from Tenda. The Tenda AC20 suffers from a hard-coded credentials vulnerability that originates from the presence of hard-coded credentials in the file /etcro/shadow. An attacker can exploit the vulnerability to cause confidentiality to be compromised...

Intel 800 Series Ethernet Input Validation Improperity Vulnerability

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. Intel 800 Series Ethernet suffers from an improper input validation vulnerability that can be exploited by an attacker to cause a...

WordPress Anber Elementor Addon plugin cross-site scripting vulnerability (CNVD-2025-19195)

WordPress Anber Elementor Addon plugin is an Elementor plugin extension for WordPress, designed to provide more customization for website design. WordPress Anber Elementor Addon plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering...

Intel Arc B-Series graphics denial of service vulnerability

Intel Arc B-Series graphics is a line of discrete graphics cards from Intel designed for desktop gaming, content creation and artificial intelligence applications. A denial of service vulnerability exists in Intel Arc B-Series graphics, which stems from a protection mechanism failure that can be...

Adobe Substance3D Modeler Out-of-Bounds Read Vulnerability

Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. An out-of-bounds read...

Adobe Illustrator Out-of-Bounds Write Vulnerability

Adobe Illustrator is an industry-standard vector graphic design software developed by Adobe, mainly used for creating and editing vector graphics, illustrations, logo design, etc., widely used in publishing, multimedia and online image fields. Adobe Illustrator suffers from an out-of-bounds write...

WordPress Billplz Addon for Contact Form 7 plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Billplz Addon for Contact Form 7 plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escapin...

Intel 800 Series Ethernet Integer Overflow Vulnerability (CNVD-2025-19829)

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. Intel 800 Series Ethernet suffers from an integer overflow vulnerability that originates from an integer overflow or wrap-around...

Adobe Commerce Path Traversal Vulnerability (CNVD-2025-24435)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A path traversal vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a bypass of security features and modify limited...

Netis WF2880 FUN_00473154 Function Buffer Overflow Vulnerability

The Netis WF2880 is a wireless router from the Chinese company Netis. A buffer overflow vulnerability exists in the Netis WF2880 FUN00473154 function, which can be exploited by an attacker to cause a denial of service...

GNU GRUB Buffer Overflow Vulnerability

GNU GRUB is a Linux system boot program from the GNU community. GNU GRUB suffers from a buffer overflow vulnerability, which stems from a missing JPEG parser buffer boundary check, that can be exploited by an attacker to run arbitrary code in the context of an affected application and take contro...

Visitor Management System query_data.php File SQL Injection Vulnerability

Visitor Management System is a visitor access management system. Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter dateF/dateP in the file /querydata.php. An attacker can exploit...

Tenda CH22 /goform/editFileName File Buffer Overflow Vulnerability

The Tenda CH22 is an enterprise-grade wireless router from the Tenda brand. Tenda CH22 suffers from a buffer overflow vulnerability, which originates from the failure of the function formeditFileName in the file /goform/editFileName to correctly validate the length and size of the input data, whi...

WordPress Authentication and xmlrpc log writer plugin cross-site scripting vulnerability

The WordPress Authentication and xmlrpc log writer plugin is a plugin for logging failed login attempts e.g. brute-force attacks and invalid XMLRPC requests, primarily for processing data and protecting against it with tools like fail2ban. The WordPress Authentication and xmlrpc log writer plugin...

Intel 800 Series Ethernet Input Validation Improperity Vulnerability (CNVD-2025-19828)

Intel 800 Series Ethernet is a new generation of high-speed Ethernet technology from Intel that supports 25GbE and 100GbE speeds and is backward compatible with 10GbE. Intel 800 Series Ethernet suffers from an improper input validation vulnerability that can be exploited by an attacker to cause a...

Unspecified Vulnerability in D-Link DIR-619L

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. A security vulnerability exists in the D-Link DIR-619L, which stems from insufficient validation of...

Intel 700 Series Ethernet Denial of Service Vulnerability

Intel 700 Series Ethernet is a family of high-performance Ethernet controllers from Intel Corporation. A denial of service vulnerability exists in Intel 700 Series Ethernet, which arises from uncontrolled resource consumption and can be exploited by an attacker to cause a denial of service...

Unspecified Vulnerability in Adobe Commerce

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has a security vulnerability that can be exploited by an attacker to cause a security feature bypass...

DELL SupportAssist for Business PCs Elevation of Privilege Vulnerability

DELL SupportAssist for Business PCs is Dell's PC management solution for enterprise users, helping companies improve IT management efficiency and reduce O&M costs through AI-driven automated support, remote deployment and centralized control capabilities. An elevation of privilege vulnerability...

Adobe Dimension Out-of-Bounds Read Vulnerability (CNVD-2025-24436)

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. Adobe Dimension suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Intel AI Playground Improper Privilege Vulnerability

Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...

D-Link DIR-825 Buffer Overflow Vulnerability

The D-Link DIR-825 is a router from China-based AUO D-Link. The D-Link DIR-825 suffers from a buffer overflow vulnerability that originates from the incorrect operation of the parameter pingipaddr in the file pingresponse.cgi, which can be exploited by an attacker to crash the system by corruptin...

Intel Converged Security and Management Engine Competitive Conditions Vulnerability

The Intel Converged Security and Management Engine is Intel's microcontroller embedded in the chipset to provide system management, security and low-power features. A competitive condition vulnerability exists in Intel Converged Security and Management Engine, and no detailed vulnerability detail...