Lucene search
+L

4440 matches found

CNVD
CNVD
added 2023/03/31 12:00 a.m.74 views

Foxit PDF Reader Remote Code Execution Vulnerability (CNVD-2023-23567)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A remote code execution vulnerability exists in Foxit PDF Reader, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

7.8CVSS7.8AI score0.01122EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/31 12:00 a.m.48 views

Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2023-25119)

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to resource management errors, which can be exploited by attackers to execute code in the current process...

7.8CVSS7.6AI score0.01025EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/31 12:00 a.m.70 views

D-Link DIR-3040 Buffer Overflow Vulnerability

D-Link DIR-3040 is a router from China Youxun D-Link Inc. The D-Link DIR-3040 is vulnerable to a buffer overflow vulnerability caused by a failure to properly boundary check the MiniDLNA service. An attacker could exploit this vulnerability to execute arbitrary code on the system...

8.8CVSS9.1AI score0.00923EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/03/31 12:00 a.m.39 views

Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2023-25120)

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to resource management errors, which can be exploited by attackers to execute code in the current process...

7.8CVSS7.6AI score0.01025EPSS
SaveExploits0References1
hivepro
hivepro
added 2023/03/30 7:07 a.m.39 views

Donot APT Group Targets Government and Military Orgs in South Asia

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary The Donot group, also known as APT-Q-38, is a state-sponsored threat actor believed to operate out of a South Asian country. They primarily engage in network espionage activities targeting government...

6.7AI score
SaveExploits0
CNNVD
CNNVD
added 2023/03/30 12:00 a.m.9 views

编号撤回

Dreamer CMS is a Dreamer Content Management System by individual developer Junnan Wang of China. The CVE number has been withdrawn...

5.4AI score
SaveExploits3References5
CNVD
CNVD
added 2023/03/29 12:00 a.m.81 views

Delta Electronics InfraSuite Device Master Deserialization Vulnerability (CNVD-2023-23883)

Delta Electronics InfraSuite Device Master is a device for simplifying and automating the monitoring of critical equipment from Delta Electronics of Taiwan, China. A deserialization vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.5, which can be exploited ...

8.8CVSS8.7AI score0.01255EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/03/29 12:00 a.m.5 views

编号已被CVE保留

No details are available at this time...

5.4AI score
SaveExploits0
CNNVD
CNNVD
added 2023/03/29 12:00 a.m.12 views

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to resource management errors, which can be exploited to execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.01091EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/27 12:00 a.m.11 views

The vulnerability of microprogrammed software in ZTE ZXvSTB TV devices, related to deficiencies in access control, allows attackers to delete arbitrary data.

The vulnerability of the microprogramming software in ZTE ZXvSTB TVs is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete arbitrary data remotely...

5.8CVSS7.8AI score0.00711EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2023/03/27 12:00 a.m.66 views

Tenda G103 Command Injection Vulnerability

Tenda G103 is an enterprise-grade Ap router from Tenda China. The Tenda G103 suffers from a command injection vulnerability that can be exploited by an attacker to obtain sensitive information via a crafted packet...

7.5CVSS7.4AI score0.01865EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/03/27 12:00 a.m.8 views

SPAM SQR 代码注入漏洞

Softnext Technologies SPAM SQR is a comprehensive email filtering platform from China-based Softnext Technologies. A code injection vulnerability exists in SPAM SQR versions prior to 2.221231, which stems from a code injection flaw. An attacker can exploit this vulnerability to execute system...

7.2CVSS7.3AI score0.00928EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/26 9:15 p.m.7 views

CVE-2023-26802

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...

9.8CVSS6AI score0.4871EPSS
SaveExploits1References1
CVE
CVE
added 2023/03/26 12:00 a.m.178 views

CVE-2023-26802

DCBI-Netlog-LAB v1.0 (DCN) contains a command-injection flaw in /network_config/nsg_masq.cgi that allows unauthenticated attackers to bypass auth and execute arbitrary OS commands via a crafted request. Affected product: DCBI-Netlog-LAB v1.0; impact per sources is high (unathenticated, arbitrary ...

9.8CVSS9.6AI score0.4871EPSS
SaveIn wildExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/26 12:00 a.m.7 views

CVE-2023-26802

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...

9.8AI score0.4871EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/03/26 12:00 a.m.12 views

Digital China Networks DCBI-Netlog-LAB 路径遍历漏洞

Digital China Networks DCBI-Netlog-LAB DCN DCBI-Netlog-LAB is an Internet Behavior Logging System from Digital China Networks DCN. A security vulnerability exists in Digital China Networks DCBI-Netlog-LAB v1.0. An attacker could exploit the vulnerability to bypass authentication and execute...

9.8CVSS8.8AI score0.4871EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2023/03/24 9:59 a.m.49 views

Researchers Uncover Chinese Nation State Hackers' Deceptive Attack Strategies

A recent campaign undertaken by Earth Preta indicates that nation-state groups aligned with China are getting increasingly proficient at bypassing security solutions. The threat actor, active since at least 2012, is tracked by the broader cybersecurity community under Bronze President, HoneyMyte,...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.7 views

编号已被CVE保留

No details are available at this time...

5.4AI score
SaveExploits0
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.9 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

7.5CVSS7.2AI score0.00289EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2023/03/23 11:54 a.m.11 views

china-center.co.kr Cross Site Scripting vulnerability OBB-3230646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
Rows per page
Query Builder