Fish Leap CMS has information leakage vulnerability

FishLeap CMS is a content management system specifically geared towards enterprise applications. An information disclosure vulnerability exists in Fish Leap CMS, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in IoT Smart Water Meter Supervision Platform of Shandong KDE Electronics Co.

IOT Smart Water Meter Supervision Platform is a smart water meter monitoring platform developed by Shandong KD Electronics Co., Ltd. with the functions of water account opening, bill payment management, data reporting and water meter management. Ltd. There is an unauthorized access vulnerability ...

Weak password vulnerability in Youku Tudou Routerbot

Youku Tudou Routerbo is a smart router. A weak password vulnerability exists in Youku Tudou Routerbo, which can be exploited by attackers to obtain sensitive information...

WordPress plugin cross-site request forgery vulnerability (CNVD-2021-37475)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . 404 SEO Redirection Cross-site request forgery...

Google TensorFlow CTCGreedyDecoder Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in Google TensorFlow CTCGreedyDecoder. An attacker can exploit this vulnerability to cause a CHECK-failure denial of service...

TensorFlow heap buffer overflow vulnerability (CNVD-2021-36543)

Google TensorFlow is an end-to-end open source machine learning platform. A heap buffer overflow vulnerability exists in the QuantizedMul implementation in TensorFlow versions prior to 2.5.0. An attacker can exploit this vulnerability by passing an invalid quantization threshold that results in a...

Google TensorFlow EditDistance Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow EditDistance. An attacker can exploit the vulnerability to trigger a null pointer dereference when implementing 'tf.rawuops.EditDistance...

Canonical Ubuntu 安全漏洞

Canonical Ubuntu is a GNU/Linux operating system from the British company Canonical that focuses on desktop applications. Ubuntu Pleaser suffers from a security vulnerability that can be exploited by an attacker with multiple Pleaser vulnerabilities...

WordPress Redirection for Contact Form 7 Plugin Improper Access Control Vulnerability (CNVD-2021-36044)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An improper access control vulnerability exists in WordPress Redirection for Contact Form 7 Plugin...

WordPress Redirection for Contact Form 7 Plugin Improper Access Control Vulnerability (CNVD-2021-36045)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An improper access control vulnerability exists in WordPress Redirection for Contact Form 7 Plugin...

Siemens Solid Edge XML External Entity Reference Vulnerability (CNVD-2021-37271)

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. A security vulnerability exists in Siemens Solid Edge. An attacker can exploit the vulnerability to disclose arbitrary files to a remote attacker...

Information leakage vulnerability in Zstack Clound of Shanghai Cloud Axis Information Technology Co.

The business scope of Shanghai Cloud Axis Information Technology Co., Ltd. includes: engaging in information technology, network technology in the field of technology development, technical services, technology transfer, technology consulting and so on. Shanghai Cloud Axis Information Technology...

File upload vulnerability in travel management system

The Travel Management System is a travel management system that uses C with source code. A file upload vulnerability exists in the Travel Management System that can be exploited by an attacker to gain control of the server...

JetBrains IntelliJ IDEA Local Code Execution Vulnerability

Jetbrains JetBrains IntelliJ IDEA is a Czech JetBrains integrated development environment for the Java language . A local code execution vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3.3. The vulnerability stems from an insufficient check when the VCS fetches the project...

Arbitrary File Read Vulnerability in GlassFish

GlassFish is a robust business compatible application server. GlassFish suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

Arbitrary File Download Vulnerability in AmarALS Credit Risk Management System

AmarALS Credit Risk Management System is a "Credit Risk Management Support System" covering all aspects of credit risk management for commercial banks. An arbitrary file download vulnerability exists in the AmarALS Credit Risk Management System, which can be exploited by an attacker to download...

Weak Password Vulnerability in 3G/4G Router of Shenzhen Hongdian Technology Co.

3G/4G Router is a router device of Shenzhen Hongdian Technology Co. A weak password vulnerability exists in the Shenzhen Hongdian Technology Co. 3G/4G Router, which can be exploited by attackers to obtain sensitive information...

Cisco SD-WAN vEdge Buffer Overflow Vulnerability

Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions. The Cisco SD-WAN vEdge has a buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow by sending malicious traffic...

Weak Password Vulnerability in GoodVision Video Conferencing System (CNVD-2021-36251)

Shenzhen Yinpeng Cloud Computing Co., Ltd. is a leading provider of cloud computing products and services in China. A weak password vulnerability exists in the GoodVision video conferencing system, which can be exploited by attackers to obtain sensitive information...

Google Android LK elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android LK has a security vulnerability. An attacker can exploit this vulnerability to elevate privileges...