Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. Foxit PhantomPDF has a remote code execution vulnerability that can be exploited by an attacker to execute code in the context of the current process...

Weak Password Vulnerability in TL-WR841HP of P&L Technology Ltd.

The TL-WR841HP is a 300Mbps, high power wireless router. A weak password vulnerability exists in the P&T TL-WR841HP, which can be exploited by an attacker to obtain sensitive information...

NetApp Cloud Manager Arbitrary File Overwrite Vulnerability

NetApp Cloud Manager is a centralized system for viewing and managing local and cloud storage with support for hybrid, multi-cloud providers and accounts. An arbitrary file overwrite vulnerability exists in NetApp Cloud Manager prior to version 3.9.4. A remote attacker could exploit this...

OurPHP suffers from an arbitrary file deletion vulnerability (CNVD-2021-24983)

OurPHP is an enterprise e-commerce marketing website building system. OurPHP has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete any file under the server...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that can be...

Logic Flaw Vulnerability in Yitoa Graphics

Yitoa Chart is a comprehensive graphic chart design software. A logic flaw vulnerability exists in Yitoa Diagrams. An attacker can exploit the vulnerability to bypass logical validation and export an unwatermarked graphic...

CVE-2021-21193

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

VideoIQ Camera suffers from a weak password vulnerability.

VideoIQ Camera is a video camera product. VideoIQ Camera suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

SAP Netweaver Application Server Java Reverse Tag Phishing Vulnerability

SAP Netweaver Application Server Java is part of the SAP NetWeaver Application Platform, which provides a complete infrastructure for deploying and running Java applications. A reverse tag phishing vulnerability exists in SAP Netweaver Application Server Java 7.00, 7.10, 7.11, 7.20, 7.30, 7.31,...

NETGEAR JGS516PE/GS116Ev2 Arbitrary Data Write Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. An arbitrary data write vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. The vulnerability stems from the TFTP firmware update mechanism not properly implementing firmware validation. A remote...

Binary Vulnerability in CAJViewer 7.3

CAJViewer 7.3 is CAJViewer series of products as of November 2006 until the latest version, it fully absorbed a variety of similar mainstream products on the market and its own advantages of the previous version of CAJViewer 6.0, after a long period of market research and systematic design and...

Siemens SINEMA Remote Connect Server Incorrect Authorization Vulnerability (CNVD-2021-16436)

Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, Germany. The platform is used to remotely access, maintain, control and diagnose the underlying network. An incorrect authorization vulnerability exists in Siemens SINEMA Remote Connect Server. The...

IBM Engineering Workflow Management Cross-Site Scripting Vulnerability (CNVD-2021-14750)

IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...

IBM Security Verify Bridge Information Disclosure Vulnerability

IBM Security Verify Bridge is an IBM application component from International Business Machines IBM, Inc. provides IBM Cloud access to user attributes and authentication that are controlled by the client's local LDAP or Active Directory. A security vulnerability exists in IBM Security Verify Brid...

Google Chrome Performance API Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Performance API. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome Extension Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Extensions. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome Referrer Misimplementation Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A Referrer improperly implemented vulnerability exists in versions of Google Chrome prior to 89.0.4389.72. A remote attacker can exploit the vulnerability to bypass...

Google Chrome Autofill Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Autofill. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome URL Formatting Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome URL formatting. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome Security Bypass Vulnerability (CNVD-2021-14179)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 89.0.4389.72. An attacker can exploit this vulnerability to bypass security restrictions...