Invigo Automatic Device Management Session Validity Check Vulnerability

Invigo Automatic Device Management ADM is a native management tool for cellular operators that enables them to detect, maintain and manage millions of devices cost-effectively and with a high degree of reliability. A session validity check vulnerability exists in several management functions in...

思科 Cisco IOS XE Wireless Controller software 跨站脚本漏洞

Cisco IOS XE Wireless Controller software is a wireless LAN controller from Cisco USA. It provides a management network function. A cross-site scripting vulnerability exists in the Cisco IOS XE Wireless Controller software, which can be exploited by an attacker to conduct a cross-site scripting...

SQL Injection Vulnerability in OurPHP (CNVD-2021-24517)

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. OurPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Weak password vulnerability in HUAWEI USG2120BSR

The USG2120BSR is a firewall from Huawei Technologies Co. The HUAWEI USG2120BSR suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Logic Flaw Vulnerability in RG-UAC Riptide Unified Internet Behavior Management and Audit System

Ltd. is a company that utilizes new technologies such as cloud computing, SDN, mobile Internet, big data, and Internet of Things to provide end-to-end solutions for users in various industries. A logic flaw vulnerability exists in the RG-UAC Ruijie Unified Internet Behavior Management and Auditin...

CloudBees Jenkins Warnings Next Generation Plugin Improper Privileges Vulnerability

Jenkins Warnings Next Generation is Jenkins open source an application plugin . The plug-in is used to collect compiler warnings or static analysis tools to report problems and visualize the results . A privilege impropriety vulnerability exists in Jenkins Warnings Next Generation Plugin version...

Command Execution Vulnerability in the WEB Management System of Riptide RSR Routers

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A command execution vulnerability exists in the WEB management system of Ruijie RSR routers. An attacker can exploit this...

SeedDMS Cross-Site Request Forgery Vulnerability

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditFolder.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

Command Execution Vulnerability in PHPWind

PHPWind is an open source community program based on PHP and MySQL. PHPWind suffers from a command execution vulnerability. An attacker can exploit this vulnerability to gain server privileges...

Weak Password Vulnerability in TP-LINKE TL-ER3220G Router

The TL-ER3220G is a dual-core multi-WAN port Gigabit enterprise VPN router. The TP-LINKE TL-ER3220G router suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

FUEL CMS Cross-Site Scripting Vulnerability (CNVD-2021-17199)

FUEL CMS is a content management system based on CodeIgniter. A cross-site scripting vulnerability exists in FUEL CMS 1.4.7. An attacker can exploit this vulnerability to conduct cross-site scripting attacks bypassing filters via /fuelCM/fuel/pages/edit/1?lang=english...

QEMU elevation of privilege vulnerability (CNVD-2021-39776)

QEMU is a suite of analog processor software. QEMU suffers from an elevation of privilege vulnerability that can be exploited by an attacker to bypass restrictions via QEMU's Virtiofsd Xattrmap option, thereby increasing privileges on the host system...

Unauthorized Access Vulnerability in yycms

yycms is a movie and television system. yycms has an unauthorized access vulnerability, which can be exploited by an attacker to gain unauthorized access and directly add friend link information in bulk...

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-14768)

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability to achieve remote code execution...

Google Chrome Compositing Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Compositing. An attacker can exploit this vulnerability to bypass security restrictions...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability to achieve remote code execution...

Memory Corruption Vulnerability in Nitro Pro (CNVD-2021-21845)

Nitro pro is a PDF production and management software. A memory corruption vulnerability exists in Nitro Pro. An attacker could exploit this vulnerability to cause the program to crash...

Unauthorized Access Vulnerability in ZXHN F460 of ZTE Corporation

ZXHN F460 is ZTE's EPON mode optical cat. An unauthorized access vulnerability exists in the ZXHN F460 of ZTE Corporation, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in EasyBuilder Pro (CNVD-2021-16898)

EasyBuilder Pro is a configuration software developed by Wyland. A denial of service vulnerability exists in EasyBuilder Pro. An attacker can exploit this vulnerability to cause the process to fall into a dead loop, resulting in a denial of service...

Arbitrary File Download Vulnerability in AmarBCR of Shanghai Anshuo Information Technology Co.

AmarBCR is a big data correlation risk monitoring system developed by Shanghai Anshuo Information Technology Co. AmarBCR of Shanghai Anshuo Information Technology Co., Ltd. suffers from an arbitrary file download vulnerability, which can be exploited by an attacker to read or download arbitrary...