2025

A vulnerability was found in Tenda TDSEE App up to 1.7.12. It has been declared as problematic. Affected by this vulnera

A vulnerability was found in Tenda AC5 15.03.06.47. It has been classified as critical. Affected is the function formSet

The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a c

The Newsletter WordPress plugin before 8.85 does not sanitise and escape some of its Form settings, which could allow h

The Newsletter WordPress plugin before 8.8.5 does not validate and escape some of its Widget options before outputting

The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those

A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster

The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authori

A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This issue affects the function formSetPP

A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects the funct

A vulnerability, which was classified as critical, was found in PHPGurukul Maid Hiring Management System 1.0. This affec

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Aff

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. A

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue a

A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. This vulner

A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16. This affects the function formSet

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is th

A vulnerability classified as critical was found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the functio

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUser

A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been rated as critical. This issue affects the functio

A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been declared as critical. This vulnerability affects

A vulnerability was found in Tenda AC15 15.03.05.19_multi. It has been classified as critical. This affects the function

A vulnerability was found in Tenda AC15 15.03.05.19_multi and classified as critical. Affected by this issue is the func

The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Mis

The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This

The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. T

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command in

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vu

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument),

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), th

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vuln

A vulnerability has been found in Tenda AC9 15.03.02.13 and classified as critical. Affected by this vulnerability is th

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.