SQL Injection Vulnerability in Hefei Chenguang Technology Website Building System (CNVD-2021-34559)

Hefei Chenguang Technology is a company engaged in website construction and website production. Hefei Chenguang Technology website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Weak Password Vulnerability in D-Link DIR-600

The D-Link DIR-600 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-600 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Discord Recon Server Code Injection Vulnerability

Discord Recon Server is an AI robot from Discord USA. Discord Recon Server version 0.0.1 suffers from a code injection vulnerability that originates from remote code execution and can be exploited by a remote attacker to execute commands on the server...

File Upload Vulnerability in Zhongke Yunlian ERP System

Ltd. is a limited company with CloudLink POS-ERP management system and FoodMaker restaurant management system as its main business. A file upload vulnerability exists in Zhongke Yunlian ERP system, which can be exploited by attackers to gain control of the server...

TP-LINK TD-W8951ND suffers from weak password vulnerability

TP-Link TD-W8951ND is a wireless router product. TP-LINK TD-W8951ND has a weak password leak. , which is exploited by attackers to obtain sensitive information...

Command execution vulnerability in RG-RAC200b (CNVD-2021-32471)

The RG-RAC200b is a wireless controller. A command execution vulnerability exists in the RG-RAC200b that can be exploited by an attacker to gain server control privileges...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2021-30935)

Oracle WebLogic Server is a cloud-native, enterprise-grade Java platform application server for multi-tier distributed enterprise application development and deployment. A security vulnerability exists in the Core component of Oracle WebLogic Server versions 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, an...

ImageMagick 安全漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert or write images in multiple formats. ImageMagick has security vulnerabilities that can be exploited by attackers to exploit multiple vulnerabilities in ImageMagick...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-29432)

OpenClinic GA is an open source hospital integrated information management system . An SQL injection vulnerability exists in the code parameter in getAssets.jsp in OpenClinic GA version 5.173.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attac...

Unauthorized Access Vulnerability in webcamxpXP 5

webcamXP is webcam and webcam software for Windows. An unauthorized access vulnerability exists in webcamxpXP 5. An attacker can exploit the vulnerability to obtain sensitive information...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-29427)

OpenClinic GA is an open source hospital integrated information management system . An SQL injection vulnerability exists in the serviceuid parameter in getAssets.jsp in OpenClinic GA version 5.173.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-29433)

OpenClinic GA is an open source hospital integrated information management system . An SQL injection vulnerability exists in the assetStatus parameter in getAssets.jsp in OpenClinic GA version 5.173.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injectio...

SQL Injection Vulnerability in URLshorting

URLshorting is a URL shortening source code. URLshorting suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Unauthorized Access Vulnerability in Baidu.com Windows Version

Baidu.com is a cloud service product. An unauthorized access vulnerability exists in the Windows version of Baidu.com. An attacker can exploit the vulnerability by restarting Baidu.com to bypass the "lock" feature...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-34485)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Hyper-V in Microsoft Windows and Windows...

CodeIgniter has a file read vulnerability

CodeIgniter is a small but powerful PHP framework. CodeIgniter has a file read vulnerability that can be exploited by an attacker to obtain sensitive information...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-34474)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Windows Security Kernel Mode in...

Microsoft Windows and Windows Server Denial of Service Vulnerability (CNVD-2021-34484)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A denial of service vulnerability exists in NTFS in Microsoft Windows and Windows Server,...

U-Center - Command Execution Vulnerability in CMDB Management

Ltd. was established on 09/26/2003. The company's business scope includes: technology development, technical services, technical consulting, transfer of achievements, production and sales: electronic products, software, data communication equipment, broadband access equipment, network security...

Patreon WordPress Cross-Site Scripting Vulnerability

Patreon is a subscription-based crowdfunding platform and Patreon WordPress is a WordPress plugin for the platform. A cross-site scripting vulnerability exists in the login form in Patreon WordPress versions prior to 1.7.2. An attacker can exploit this vulnerability to conduct cross-site scriptin...