EUVD-2020-27663

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream...

WebChess SQL Injection Vulnerability

WebChess is a web-based online chess game. A SQL injection vulnerability exists in WebChess version 1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL command...

SpryMedia DataTables SQL Injection Vulnerability

SpryMedia DataTables is a British SpryMedia company for the conversion of HTML tables into dynamic tables of JavaScript library . A SQL injection vulnerability exists in the 'start' and 'length' parameters of the Records.php file in SpryMedia DataTables. A remote attacker can exploit this...

SUSE-SU-2020:1164-2 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: - CVE-2019-15690: Fixed a heap buffer overflow bsc1160471. - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory bsc1155419. - CVE-2019-20788: Fixed a integer overflow and heap-based buffer...

Google Android Framework elevation of privilege vulnerability (CNVD-2020-43684)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. There is a security vulnerability in Framework in Android. An attacker can exploit the vulnerability to elevate privileges...

TP-Link TL-WR740N and TL-WR740ND Injection Vulnerability

The TP-Link TL-WR740N and TP-Link TL-WR740ND are both wireless routers from China's P&L TP-Link. A security vulnerability exists in TP-Link TL-WR740N v4 and TL-WR740ND v4. The vulnerability can be exploited by an attacker to inject HTML code and change the HTML context of target pages and sites...

WordPress Input Validation Error Vulnerability (CNVD-2021-24380)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An input validation error vulnerability exists in WordPress that originates from a web system or product that...

Microsoft Windows Feedback Hub Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Feedback Hub, which arises from a program's failure to properly handle memory, and can be exploited by an attacker w...

Microsoft Windows Runtime Elevation of Privilege Vulnerability (CNVD-2021-22932)

Microsoft Windows Runtime .net framework is an essential functional support library for the Windows operating system from Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Runtime, which arises from a failure of the program to properly handle objects in memory. The...

Microsoft Store Runtime Elevation of Privilege Vulnerability (CNVD-2021-25014)

Microsoft Store Runtime is an application store software from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Store Runtime, which arises from a failure of the program to properly handle memory and can be exploited by an attacker to gain elevation of privilege by runnin...

Microsoft Windows Security Health Service elevation of privilege vulnerability (CNVD-2021-25974)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Security Health Service. An attacker could exploit this vulnerability by logging on to the system and running...

Microsoft Office SharePoint cross-site scripting vulnerability (CNVD-2021-24036)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft Office SharePoint Cross-Site Scripting Vulnerability (CNVD-2021-24039)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability (CNVD-2021-24002)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way the VBScript Engine handles objects in memory in...

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially...

libjpeg-turbo Buffer Overflow Vulnerability

libjpeg is a C language library for processing image data in JPEG format. The product includes JPEG decoding, JPEG encoding and other JPEG functions. libjpeg-turbo is an optimized and improved version of libjpeg. A buffer overflow vulnerability exists in the 'getrgbrow' function of the rdppm.c fi...

Google Android System Information Disclosure Vulnerability (CNVD-2020-31522)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android 10. An attacker can exploit the vulnerability to obtain sensitive informati...

Centreon host-monitoring widget, service-monitoring widget and tactical-overview widget cross-site scripting vulnerabilities (CNVD-2021-28002)

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon. The product mainly provides monitoring of network , system and application resources . host-monitoring widget is one of the host monitoring widget . service-monitoring widget is one of the...

SAP Master Data Governance SQL Injection Vulnerability

SAP Master Data Governance is a suite of data management tools from SAP Germany for maintaining, validating, and distributing master data. A SQL injection vulnerability exists in SAP Master Data Governance. An attacker could exploit this vulnerability by executing specially crafted database query...

WeiPHP suffers from an information leakage vulnerability

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. WeiPHP suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...