Google Android elevation of privilege vulnerability (CNVD-2025-29704)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Google Android elevation of privilege vulnerability (CNVD-2025-29706)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is due to a logic error in multiple locations that can be exploited by an attacker to elevate privileges...

Google Android elevation of privilege vulnerability (CNVD-2025-30722)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the code of multiple functions in RoleService.java, which can be exploited by an attacker to gain elevated privileges on the system...

Google Android Information Disclosure Vulnerability (CNVD-2025-29709)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a lack of permission checking in the offerNetwork function in ConnectivityService.java. An attacker can exploit this vulnerability to obtain...

Google Android elevation of privilege vulnerability (CNVD-2025-30723)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to unauthorized data access caused by SQL injection in multiple functions in PickerDbFacade.java. An attacker can exploit the vulnerability to elevate...

Google Chrome Extension Improperly Implemented Vulnerability

Google Chrome is a web browser developed by Google, known for being fast, secure and personalized, with support for multi-device synchronization and smart tool integration. Google Chrome suffers from an Extension Misimplementation vulnerability that stems from an inadequate validation mechanism f...

Google Android Obfuscated Proxy Vulnerability

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from an obfuscated proxy vulnerability that originates from an...

Google Android Information Disclosure Vulnerability (CNVD-2025-30724)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android elevation of privilege vulnerability (CNVD-2025-28665)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to cause an elevation of privilege on a paired device...

Google Android Information Disclosure Vulnerability (CNVD-2025-28667)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to a logic error in the onCreate function in NotificationAccessConfirmationActivity.java that results in incorrect validation of the Correct Intent...

Google Android Reuse After Release Vulnerability

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from a post-release reuse vulnerability, which can be exploited...

Unspecified Vulnerability in Google Android (CNVD-2025-23039)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause local elevation of privilege...

Google Android elevation of privilege vulnerability (CNVD-2025-26732)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a BAL bypass in the clearAllowBgActivityStarts function in PendingIntentRecord.java. An attacker can exploit the vulnerability to eleva...

Google Android elevation of privilege vulnerability (CNVD-2025-29707)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Unspecified Vulnerability in NVIDIA BlueField (CNVD-2025-21178)

NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField has a security vulnerability that can be exploited by attackers to potentially cause a denial of service, elevation of privilege, and information disclosure...

Google Android Code Execution Vulnerability (CNVD-2025-23031)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused by out-of-bounds access due to incorrect boundary checking in multiple locations. An attacker can exploit the vulnerability to execute arbitrary code...

Unspecified Vulnerability in NVIDIA DOCA

NVIDIA DOCA is a software framework from NVIDIA. NVIDIA DOCA has a security vulnerability that can be exploited by attackers to potentially cause elevation of privilege...

appRain CMF cross-site scripting vulnerability (CNVD-2025-21110)

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF, which is caused by improper validation of user input in /apprain/appreport/manage/endpoint. An attacker could use this vulnerability to steal the victim's cookie-based authentication...

appRain CMF cross-site scripting vulnerability (CNVD-2025-21129)

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user input in the /apprain/developer/language/default.xml endpoint. An attacker could use this vulnerability to steal the victim's cookie-based authentication...

appRain CMF cross-site scripting vulnerability (CNVD-2025-21125)

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user input on the /apprain/developer/addons/update/tree endpoint. An attacker could use this vulnerability to steal a victim's cookie-based authentication...

Google Android Logic Error Vulnerability (CNVD-2025-26798)

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from a logic error vulnerability that can be exploited by...

Google Android elevation of privilege vulnerability (CNVD-2025-23025)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a way to bypass intent security checks due to proxy obfuscation in multiple functions in AppRestrictions Fragment.java. An attacker can...

Google Android elevation of privilege vulnerability (CNVD-2025-24501)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges due to a logic error in the executeAppFunction function in AppSearchManagerService.java that...

Apache DolphinScheduler Default Privilege Error Vulnerability

Apache DolphinScheduler is a modern data scheduling platform from the Apache USA Foundation. Apache DolphinScheduler versions prior to 3.2.2 are vulnerable to a default privilege error vulnerability, no details of the vulnerability are provided at this time...

Complaint Management System in PHP reset-password.php file SQL injection vulnerability

Complaint Management System in PHP is a complaint management system. Complaint Management System in PHP suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the mobileno parameter of user/reset-password.php. An attacker can...

Complaint Management System SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the cid parameter of /complaint-details.php. An attacker can exploit this vulnerabili...

Cisco Webex Meetings Cross-Site Scripting Vulnerability (CNVD-2025-21256)

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. A cross-site scripting vulnerability exists in Cisco Webex Meetings that stems from insufficient validation of user input and can be exploited by an attacker to cause a cross-site scripting attack...

Online Shopping Portal File Upload Vulnerability

Online Shopping Portal is an online store. A file upload vulnerability exists in Online Shopping Portal, which stems from a lack of extension validation in /admin/insert-product.php, and can be exploited by an attacker to cause arbitrary file uploads...

Mobile Shop Management System AddNewProduct.php file code problem vulnerability

Mobile Shop Management System is a store management system. Mobile Shop Management System has a code issue vulnerability that stems from the lack of valid validation of uploaded files in the parameter ProductImage in the file AddNewProduct.php. An attacker can exploit this vulnerability to upload...

Freescout deserialization vulnerability

FreeScout is an open source helpdesk system built on the PHP Laravel framework, designed to provide users with functionality similar to Zendesk or Help Scout, but without sacrificing privacy or freedom. Freescout suffers from a deserialization vulnerability that stems from the application's unsaf...

Apache DolphinScheduler Code Execution Vulnerability

Apache DolphinScheduler is a modern data scheduling platform from the Apache USA Foundation. A code execution vulnerability exists in Apache DolphinScheduler versions prior to 3.2.2 due to improper input validation. An attacker can exploit this vulnerability to execute arbitrary shell scripts on...

D-Link DI-8400 yyxz.asp File Stack Buffer Overflow Vulnerability

The D-Link DI-8400 is an enterprise-class Internet behavior management router from D-Link for medium to large enterprise network environments. The D-Link DI-8400 suffers from a stack buffer overflow vulnerability that originates from a stack-based buffer overflow in the parameter ID of the functi...

Sales and Inventory System Cross-site Script Vulnerability (CNVD-2026-38242)

Sales and Inventory System is a sales and inventory management system. The Sales and Inventory System has a cross-site scripting vulnerability, which stems from the lack of effective filtering and escaping of data provided by users due to the parameter “page” in the file/index.php. No detailed...

Doctor Appointment Management System Cross-Site Scripting Vulnerability

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, no details of the vulnerability...

TOTOLINK N600R Command Injection Vulnerability

The TOTOLINK N600R is a dual-band wireless router launched by Korean brand TOTOLINK in 2013, supporting concurrent operation in the 2.4GHz and 5GHz bands with a maximum wireless transmission rate of 300Mbps. The TOTOLINK N600R suffers from a command injection vulnerability that originates from...

Tenda AC8 formWifiBasicSet function buffer overflow vulnerability

Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management. A buffer overflow vulnerability exists in the Tenda AC8, which is caused by the formWifiBasicSet function failing to correctly...

Unspecified Vulnerability in Akinsoft MyRezzta

Aiseesoft is a technology company specializing in software development. Akinsoft MyRezzta has a security vulnerability that stems from improper execution of behavioral workflows and uncontrolled consumption of resources, no details of the vulnerability are provided at this time...

Fuji Electric FRENIC-Loader 4 Deserialization Vulnerability

Fuji Electric FRENIC-Loader 4 is a computer software designed for Fuji Electric inverters such as the FRENIC series, mainly for parameter setting, monitoring and debugging. A deserialization vulnerability exists in Fuji Electric FRENIC-Loader 4, which can be exploited by an attacker to execute...

Complaint Management System registration.php file SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements for the fullname, email, and contactno parameters in user/registration.php. An...

SAMSUNG Notes Information Disclosure Vulnerability (CNVD-2025-24709)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an information disclosure vulnerability that can be exploited by an attacker to cause data access across user profiles...

Complaint Management System userprofile.php file cross-site scripting vulnerability

Complaint Management System is a complaint management system. A cross-site scripting vulnerability exists in Complaint Management System, which stems from a lack of effective filtering and escaping of user-supplied data in the fullname parameter of admin/userprofile.php, for which no detailed...

SAMSUNG Notes Information Disclosure Vulnerability (CNVD-2025-24710)

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. An information disclosure vulnerability exists in SAMSUNG Notes, which can be exploited by an attacker to access exported notes files...

Sales and Inventory System Cross-site Script Vulnerability (CNVD-2026-38241)

Sales and Inventory System is a sales and inventory management system. The Sales and Inventory System has a cross-site scripting vulnerability, which arises from incorrect handling of parameters in the file/index.php, leading to a cross-site scripting attack. No detailed details about the...

Travel Management System SQL Injection Vulnerability

Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter pid in the file /detail.php. An attacker can exploit this vulnerability to...

Akinsoft MyRezzta Authentication Bypass Vulnerability

Aiseesoft is a technology company specializing in software development. An authentication bypass vulnerability exists in Akinsoft MyRezzta that stems from improperly limiting authentication attempts, and no detailed vulnerability details are available at this time...

Akinsoft MyRezzta Authentication Bypass Vulnerability

Aiseesoft is a technology company specializing in software development. An authentication bypass vulnerability exists in Akinsoft MyRezzta, which stems from improperly limiting authentication attempts and could lead to authentication bypass, password recovery exploitation, and brute-force breakin...

Complaint Management System in PHP subcategory.php file cross-site scripting vulnerability

Complaint Management System in PHP is a complaint management system. A cross-site scripting vulnerability exists in Complaint Management System in PHP, which stems from the lack of effective filtering and escaping of user-supplied data in the categoryName parameter of admin/subcategory.php, for...

Sports Management System facilitator.php File SQL Injection Vulnerability

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter code in the file /Admin/facilitator.php. An attacker can exploit this vulnerabili...

Sports Management System sporttype.php File SQL Injection Vulnerability

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter code in the file /Admin/sporttype.php. An attacker can exploit this...

Google Android elevation of privilege vulnerability (CNVD-2026-00036)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a logic error in the code at multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the...