Unauthorized Access Vulnerability in HP Officejet Pro Printer Management Page

Hewlett-Packard Trading Shanghai Co., Ltd. was registered and established on February 8, 1999 in the Market Supervision Administration of the Free Trade Zone. The company's business scope includes computer equipment, printing equipment, imaging equipment, electronic products and related parts of...

Information Disclosure Vulnerability in Shentong's Large General Database

Shentong Large General Database is a computer database. An information disclosure vulnerability exists in the Avatar Large General Database, which can be exploited by an attacker to gain control of a server...

Cisco Unified Communications Manager SQL Injection Vulnerability (CNVD-2021-28255)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A SQL injection vulnerability...

Weak Password Vulnerability in Huawei S7712 Management Page

Huawei S7712 is a routing switch with store-and-forward switching. A weak password vulnerability exists in the Huawei S7712 management page, which can be exploited by an attacker to obtain sensitive information...

Citrix Hypervisor Denial of Service Vulnerability

Citrix Systems Hypervisor is an application from Citrix Systems, Inc. It is used to simplify operations management and ensure a high-definition user experience for intensive workloads. Citrix Hypervisor has a security vulnerability that can be exploited by an attacker to trigger a denial of servi...

Unauthorized Access Vulnerability in Crypto Email and Enterprise Mailboxes

Beijing Xiongzhiweiye Software Co., Ltd. was founded in 1996, is a professional network platform development vendors, the company's main business for the development and sales of computer network software products, and computer software, hardware products sales, agents. An unauthorized access...

TP_LINK-TD-W8901G suffers from weak password vulnerability

TPLINK-TD-W8901G is a wireless router. The TPLINK-TD-W8901G suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Aruba Instant Arbitrary File Modification Vulnerability (CNVD-2021-26048)

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant suffers from an arbitrary file modification vulnerability that can be exploited by an attacker via the Web UI to overwrite arbitrary files with content under their control...

The vulnerability of the Windows Print Spooler component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Print Spooler component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Cisco IOx Application Denial of Service Vulnerability

Cisco Iox is the U.S. Cisco Cisco a combination of Cisco IOS and Linux OS for secure network connectivity and the development of IOT applications for secure development environment. The Cisco IOx Application Framework's Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829...

BaserCMS OS Command Injection Vulnerability

BaserCMS is an open source enterprise-level content management system cms. An OS command injection vulnerability exists in BaserCMS versions prior to 4.4.5. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary OS commands...

Invigo Automatic Device Management Session Validity Check Vulnerability

Invigo Automatic Device Management ADM is a native management tool for cellular operators that enables them to detect, maintain and manage millions of devices cost-effectively and with a high degree of reliability. A session validity check vulnerability exists in several management functions in...

思科 Cisco IOS XE Wireless Controller software 跨站脚本漏洞

Cisco IOS XE Wireless Controller software is a wireless LAN controller from Cisco USA. It provides a management network function. A cross-site scripting vulnerability exists in the Cisco IOS XE Wireless Controller software, which can be exploited by an attacker to conduct a cross-site scripting...

SQL Injection Vulnerability in OurPHP (CNVD-2021-24517)

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. OurPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Weak password vulnerability in HUAWEI USG2120BSR

The USG2120BSR is a firewall from Huawei Technologies Co. The HUAWEI USG2120BSR suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

CloudBees Jenkins Warnings Next Generation Plugin Improper Privileges Vulnerability

Jenkins Warnings Next Generation is Jenkins open source an application plugin . The plug-in is used to collect compiler warnings or static analysis tools to report problems and visualize the results . A privilege impropriety vulnerability exists in Jenkins Warnings Next Generation Plugin version...

Logic Flaw Vulnerability in RG-UAC Riptide Unified Internet Behavior Management and Audit System

Ltd. is a company that utilizes new technologies such as cloud computing, SDN, mobile Internet, big data, and Internet of Things to provide end-to-end solutions for users in various industries. A logic flaw vulnerability exists in the RG-UAC Ruijie Unified Internet Behavior Management and Auditin...

Command Execution Vulnerability in the WEB Management System of Riptide RSR Routers

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A command execution vulnerability exists in the WEB management system of Ruijie RSR routers. An attacker can exploit this...

SeedDMS Cross-Site Request Forgery Vulnerability

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditFolder.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

Command Execution Vulnerability in PHPWind

PHPWind is an open source community program based on PHP and MySQL. PHPWind suffers from a command execution vulnerability. An attacker can exploit this vulnerability to gain server privileges...