Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-29105)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in NTFS in Microsoft Windows and Windows...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-29104)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Windows Services and Controllers...

SAP NetWeaver AS JAVA cross-site scripting vulnerability (CNVD-2021-29100)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver AS JAVA versions 7.10 and 7.11. An attacker can...

Denial of Service Vulnerability in Suntech Cloud QTouch Configuration Software General Edition

QTouch configuration software is a professional cross-platform automation software launched by Wuhan SunTone Intelligent Technology Co. A denial of service vulnerability exists in the general version of SunTouch Cloud QTouch Configuration Software. An attacker can exploit this vulnerability to...

Siemens SIMOTICS CONNECT 400 Denial of Service Vulnerability (CNVD-2021-28705)

SIMOTICS CONNECT 400 is a connector and sensor box mounted on a low-voltage motor that provides analysis data for the MindSphere application SIDRIVE IQ Fleet. A denial of service vulnerability exists in the Siemens SIMOTICS CONNECT 400. The vulnerability is due to the DNS domain record...

Denial of Service Vulnerability in ABBYY FineReader (CNVD-2021-30853)

ABBYY FineReader is an all-in-one OCR and PDF software application. ABBYY FineReader suffers from a denial of service vulnerability. An attacker can exploit the vulnerability to cause the program to crash...

INSMA Wifi Mini Spy 1080P HD Security IP Camera Cross-Site Request Forgery Vulnerability

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. The INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to access the web via all fields...

Rust integer overflow vulnerability (CNVD-2021-28296)

Rust is a systems programming language characterized by fast operation, the ability to prevent segmentation errors, and thread-safety. An integer overflow vulnerability exists in the Zip implementation of the standard library in versions of Rust prior to 1.52.0. An attacker can exploit this...

Remote Command Execution Vulnerability in the Console of Chianxin Tianrong Terminal Security Management System

Chianxin Tianrong Terminal Security Management System is an integrated terminal security product solution for government and enterprise organizations. The product integrates anti-virus, terminal security control, terminal access, terminal audit, peripheral control, EDR and other functions, is...

Learnsite Remote Elevation of Privilege Vulnerability

Learnsite is an information technology classroom learning platform. A remote elevation of privilege vulnerability exists in the JudgIsAdmin function in /Manager/index.aspx in Learnsite version 1.2.5.0. An attacker can exploit this vulnerability by modifying the first letter of the user cookie key...

ASUS BMC Firmware Security Feature Issue Vulnerability (CNVD-2021-36011)

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a security signature issue vulnerability that stems from a buffer overflow vulnerability due to the Radius configuration function failing to validate the length of a user-entered string. A remote attacker could...

The vulnerabilities of the crypto/x509 libraries and the golang.org/x/crypto/cryptobyte library in the Go programming language allow attackers to induce a service failure.

The vulnerability of the crypto/x509 libraries and golang.org/x/crypto/cryptobyte programming language is related to errors in the certificate validation process. Exploiting this vulnerability allows an attacker to cause service interruptions...

Google Android QuickContactActivity.java Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in Google Android QuickContactActivity.java. An attacker can exploit this vulnerability to obtain sensitive informati...

Python Bleach 跨站脚本漏洞

Python Bleach is a Python based HTML cleanup library. Python Bleach suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trigger cross-site scripting in order to run JavaScript code in the context of a website...

FreeBSD Injection Vulnerability

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. FreeBSD suffers from an injection vulnerability that can be exploited by an attacker to cause the driver to misinterpret portions of the payload of a large package as separate packages...

Mangroves has a flawed logic vulnerability

Mangroves is an intelligent vehicle monitoring system. Mangroves is vulnerable to a logic flaw. An attacker can exploit the vulnerability to bypass authenticated login by constructing a cookie message...

Weak password vulnerability in SRG1210W

The SRG1210W is a high performance enterprise router. The SRG1210W suffers from a weak password vulnerability. An attacker could exploit this vulnerability to obtain sensitive information...

Weak password vulnerability in Huawei Technologies Ltd Secoway USG2160BSR

The Secoway USG2160BSR is a firewall from Huawei Technologies Co. A weak password vulnerability exists in the Huawei Technologies Ltd Secoway USG2160BSR, which can be exploited by attackers to obtain sensitive information...

Microsoft Visual Studio Code Code Injection Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code injection vulnerability in Microsoft Visual Studio Code unofficial C/C++ Advanced Lint extension prior to version 1.9.0 can be exploited by an attacker to execute arbitrary binaries when a user opens a carefully...

Tibco Software TIBCO Software FTL 安全漏洞

Tibco Software TIBCO Software FTL is an application-to-application messaging system from TIBCO Software USA. A security vulnerability exists in TIBCO Software FTL, which can be exploited by an attacker to insert malicious software...