Wibu-Systems CodeMeter CmWAN Denial of Service Vulnerability

The Wibu-Systems CodeMeter is a basic technology for all protection and licensing solutions offered by Wibu-Systems. A security vulnerability exists in Wibu-Systems CodeMeter CmWAN, which can be exploited by a remote attacker to submit a special request that can crash the application...

ECShop SQL Injection Vulnerability (CNVD-2021-44948)

ECShop is a professional e-commerce mall system. A SQL injection vulnerability exists in ECShop version 3.0. An attacker can exploit this vulnerability by using the id parameter of admin/shophelp.php to perform SQL injection attacks...

SAP NetWeaver Application Server Cross-Site Scripting Vulnerability

SAP NetWeaver Application Server is an application server from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server, which can be exploited by an attacker to launch a cross-site scripting attack...

Arbitrary File Deletion Vulnerability in Blue Ocean Premier Billing Management System

Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security, and aiming at improving management efficiency. The Blue Ocean Excellence Billing Management System has an arbitrary...

Adobe Animate Out-of-Bounds Read Vulnerability (CNVD-2021-49188)

Adobe Animate is a multimedia authoring and computer animation program. An out-of-bounds read vulnerability exists in Adobe Animate 21.0.6 and earlier versions. An attacker could exploit this vulnerability to obtain information...

XDcms Has Arbitrary File Deletion Vulnerability

XDcms is a general purpose content management system. XDcms has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file on the server...

IBM Security Verify Access Information Disclosure Vulnerability (CNVD-2021-39691)

IBM Security Verify Access, formerly known as IBM Security Access Manager or ISAM, is designed to help you simplify user access and more securely adopt Web, mobile, IoT and cloud technologies. An information disclosure vulnerability exists in IBM Security Verify Access version 20.07. An attacker...

SQL Injection Vulnerability in Purple Electronic File Management System

hereinafter referred to as "Ziguang Software" is a leading provider of industry solutions and IT services in China. A SQL injection vulnerability exists in the Ziguang Electronic File Management System. The vulnerability can be exploited by an attacker to obtain sensitive information from the...

Vsmart Live suffers from an information disclosure vulnerability

Vsmart Live is a smartphone. Vsmart Live suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Fish Leap CMS has information leakage vulnerability

FishLeap CMS is a content management system specifically geared towards enterprise applications. An information disclosure vulnerability exists in Fish Leap CMS, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in IoT Smart Water Meter Supervision Platform of Shandong KDE Electronics Co.

IOT Smart Water Meter Supervision Platform is a smart water meter monitoring platform developed by Shandong KD Electronics Co., Ltd. with the functions of water account opening, bill payment management, data reporting and water meter management. Ltd. There is an unauthorized access vulnerability ...

WordPress plugin cross-site request forgery vulnerability (CNVD-2021-37475)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . 404 SEO Redirection Cross-site request forgery...

Weak password vulnerability in Youku Tudou Routerbot

Youku Tudou Routerbo is a smart router. A weak password vulnerability exists in Youku Tudou Routerbo, which can be exploited by attackers to obtain sensitive information...

TensorFlow heap buffer overflow vulnerability (CNVD-2021-36543)

Google TensorFlow is an end-to-end open source machine learning platform. A heap buffer overflow vulnerability exists in the QuantizedMul implementation in TensorFlow versions prior to 2.5.0. An attacker can exploit this vulnerability by passing an invalid quantization threshold that results in a...

Google TensorFlow CTCGreedyDecoder Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in Google TensorFlow CTCGreedyDecoder. An attacker can exploit this vulnerability to cause a CHECK-failure denial of service...

Google TensorFlow EditDistance Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow EditDistance. An attacker can exploit the vulnerability to trigger a null pointer dereference when implementing 'tf.rawuops.EditDistance...

Canonical Ubuntu 安全漏洞

Canonical Ubuntu is a GNU/Linux operating system from the British company Canonical that focuses on desktop applications. Ubuntu Pleaser suffers from a security vulnerability that can be exploited by an attacker with multiple Pleaser vulnerabilities...

WordPress Redirection for Contact Form 7 Plugin Improper Access Control Vulnerability (CNVD-2021-36045)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An improper access control vulnerability exists in WordPress Redirection for Contact Form 7 Plugin...

WordPress Redirection for Contact Form 7 Plugin Improper Access Control Vulnerability (CNVD-2021-36044)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An improper access control vulnerability exists in WordPress Redirection for Contact Form 7 Plugin...

Siemens Solid Edge XML External Entity Reference Vulnerability (CNVD-2021-37271)

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. A security vulnerability exists in Siemens Solid Edge. An attacker can exploit the vulnerability to disclose arbitrary files to a remote attacker...