4440 matches found
Foxit PDF Reader Doc Object Remote Code Execution Vulnerability (CNVD-2023-07903)
Foxit PDF Reader is a PDF reader from Foxit China.A remote code execution vulnerability exists in the Foxit PDF Reader Doc object, which can be exploited by attackers to execute code in the context of the current process...
ZTE ZXMP M721 Privilege and Access Control Vulnerability
The ZTE ZXMP M721 is a metro edge OTN Optical Transport Network device from ZTE Corporation ZTE in China.The ZTE ZXMP M721 has a privilege and access control vulnerability, which stems from the fact that the folder privilege viewed by sftp is 666, which is inconsistent with the actual privilege,...
Foxit PDF Reader Doc Object Remote Code Execution Vulnerability (CNVD-2023-07905)
Foxit PDF Reader is a PDF reader from Foxit China.A remote code execution vulnerability exists in the Foxit PDF Reader Doc object, which can be exploited by attackers to execute code in the context of the current process...
Foxit PDF Reader Annotation Remote Code Execution Vulnerability (CNVD-2023-07904)
Foxit PDF Reader is a PDF reader from Foxit China.A remote code execution vulnerability exists in Foxit PDF Reader Annotation, which can be exploited by attackers to execute code in the context of the current process...
编号撤回
This CVE number has been withdrawn...
Foxit PDF Reader Annotation Remote Code Execution Vulnerability (CNVD-2023-07867)
Foxit PDF Reader is a PDF reader from Foxit China.A remote code execution vulnerability exists in Foxit PDF Reader Annotation, which can be exploited by attackers to execute code in the context of the current process...
Asus DSL-N14U-B1 Denial of Service Vulnerability
The ASUS DSL-N14U-B1 is a router device from Asus China. A denial of service vulnerability exists in the Asus DSL-N14U-B1 version 1.1.2.3805. The vulnerability stems from a failure to properly handle incoming error messages and can be exploited by a remote attacker to cause a denial of service Do...
Delta Electronics CNCSoft Out-of-Bounds Read Vulnerability
Delta Electronics CNCSoft is a CNC machine simulation system software from Delta Electronics, China. An out-of-bounds read vulnerability exists in Delta Electronics CNCSoft, which can be exploited by an attacker to cause an out-of-bounds read condition due to the affected product not properly...
Delta Electronics CNCSoft Stack Buffer Overflow Vulnerability
Delta Electronics CNCSoft is a CNC machine simulation system software from Delta Electronics, China. A security vulnerability exists in Delta Electronics CNCSoft, which can be exploited by an attacker to cause a stack buffer overflow when processing a specific project file, as the affected produc...
ShopWind SQL Injection Vulnerability
ShopWind is a China ShopWind company based on Yii2.0 framework deep refactoring of B2B2C, O2O industry e-commerce system software. ShopWind 3.4.2 and previous versions have SQL injection vulnerability, attackers can use the vulnerability to execute illegal SQL commands to steal sensitive data fro...
TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50676)
TOTOLINK N600R is a wireless router from Gion Electronics TOTOLINK, Taiwan, China. buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from the lack of length validation of the apcliKey parameter in the FUN0041bac4 function. An attacker could exploit this...
TOTOLINK N600R Buffer Overflow Vulnerability
TOTOLINK N600R is a wireless router from Taiwan, China-based Gion Electronics TOTOLINK.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN004200c8 function. An attacker could exploit this...
D-Link DIR-816 A2 Buffer Overflow Vulnerability (CNVD-2022-42153)
The D-Link DIR-816 A2 is a wireless router from D-Link, Taiwan, China.A buffer overflow vulnerability exists in the D-Link DIR-816 A2, which stems from a boundary error in the addurlfilter parameter in /goform/websURLFilter when handling untrusted input, which could be exploited by an attacker to...
TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53550)
TOTOLINK N600R is a wireless router from TOTOLINK, Taiwan, China.The TOTOLINK N600R V5.3c.7159B20190425 firmware version is vulnerable to command injection, which can be exploited by attackers via the /setting/CloudACMunualUpdate in the filename parameter in /setting/CloudACMunualUpdate to conduc...
TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50669)
TOTOLINK N600R is a wireless router from Taiwan, China-based Gion Electronics TOTOLINK.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the File parameter in the FUN0041309c function. An attacker could exploit this...
TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50673)
TOTOLINK N600R is a wireless router from Taiwan, China-based Gion Electronics TOTOLINK.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN004192cc function. An attacker could exploit this...
TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53551)
TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, China.A command injection vulnerability exists in TOTOLINK N600R, which can be exploited by attackers to conduct command injection attacks via the hosttime function in /setting/NTPSyncWithHost...
D-Link DIR-816 A2 Command Injection Vulnerability (CNVD-2022-45933)
D-Link DIR-816 A2 is a wireless router from D-Link, Taiwan, China.A command injection vulnerability exists in D-Link DIR-816 A2, which stems from the failure to properly filter the admuser and admpass parameters in /goform/setSysAdm to construct command special characters, commands, etc. The...
D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64492)
The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 version, which originates from a boundary error in the urladd parameter in the device/goform/websURLFilterAddDel when processing untrusted input. An...
D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64488)
The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-816 A2v1.10CNB04 firmware version suffers from a buffer overflow vulnerability that originates from a boundary error in the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip when processing untrusted...