Mikrotik RouterOS v6.48 suffers from a denial of service vulnerability

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A denial of service vulnerability exists in Mikrotik RouterOS v6.48, which can be exploited by an attacker to caus...

Extreme Office suffers from a memory corruption vulnerability (CNVD-2021-03437)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Xunlei 11 suffers from a local power lifting vulnerability

Thunderbolt 11 is a computer downloader software. Xunlei 11 suffers from a local elevation vulnerability. An attacker can exploit the vulnerability to elevate a user with low privileges to system privileges...

Webswing Remote Code Execution Vulnerability

Webswing is a web server that lets you run any swing application in a web browser using only pure HTML5. A remote code execution vulnerability exists in JsLink in Webswing that can be exploited by an attacker to execute code in the server...

Information leakage vulnerability in Doogee Mobile for Android Extreme Edition

The business scope of Wuhan Douyu Network Technology Co., Ltd. includes: technology development, technology transfer, technology consulting and technical services in the field of computer and network technology. An information leakage vulnerability exists in the Android Extreme version of Douyu's...

Command Execution Vulnerability in Curtain Client

Curtain Client is a mind mapping software. A command execution vulnerability exists in the Curtain Client, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

Binary Vulnerability in Nidesoft 3GP Video Converter

Nidesoft 3GP Video Converter supports all cell phone video formats. 3GP Converter converts so as to support a full range of video formats. Including MPEG1/2/4, WMV, MP4, MOV, H.264/MPEG-4 AVC to 3GP, MPEG-4 video. A binary vulnerability exists in Nidesoft 3GP Video Converter. An attacker can...

Unauthorized Access Vulnerability in EDAS Hands-On Dedicated System

Aliyun, an Alibaba Group company, is a leading global cloud computing and artificial intelligence technology company. An unauthorized access vulnerability exists in the EDAS hands-on dedicated system, which can be exploited by an attacker to gain unauthorized access to sensitive information...

SAP AS ABAP and SAP S4 HANA Improper Authentication Vulnerabilities

SAP Netweaver is a service-oriented, integrated application platform from SAP, which provides a development and runtime environment for SAP applications. The platform mainly provides development and operation environment for SAP applications.ABAP is an application server running in NetWeaver and...

Binary Vulnerability in Rexchip Chip (CNVD-2020-75212)

With a R&D team specializing in system-on-chip design and algorithm research, Rexchip Microelectronics Corporation provides professional chip solutions for high-end intelligent hardware, cell phone peripherals, tablet PCs, TV set-top boxes, industrial control and other fields. A binary...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-39512)

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to achieve remote code execution...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-39510)

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to achieve remote code execution...

Google Chrome filesystem security bypass vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome filesystem. An attacker can exploit this vulnerability to bypass security restrictions...

SAP Fiori Launchpad Cross-Site Scripting Vulnerability

SAP Fiori is SAP's user experience UX design system for SAP applications, which provides designers and developers with a set of tools and guidelines to quickly develop applications for any platform, providing a consistent, innovative experience for creators and users.SAP Fiori Launchpad is the SA...

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Cross-Site Request Forgery Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. The Trend Micro InterScan Messaging Security Virtual Appliance IMSVA suffers from a cross-site request forgery vulnerability that arises from a web application that does...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-08823)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word. The vulnerability stems from the program not properly handling objects in memory. An attacker can exploit the vulnerability by...

Remote code execution

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

Microsoft Windows KernelStream Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows KernelStream. The...

Microsoft Windows WER Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows WER. An attacker could...

Remote Code Execution Vulnerability in Lilin NVR104 NTP Component

NVR104 is a stand-alone NVR recorder from LILING that supports up to 4 IP network cameras. A remote code execution vulnerability exists in the Lilin NVR104. An attacker can exploit the vulnerability to gain control of the NVR device...