CAJViewer suffers from a denial of service vulnerability (CNVD-2021-41719)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A denial of service vulnerability exists in CAJViewer. An attacker can exploit this vulnerability to cause the program to crash...

CAJViewer suffers from a denial of service vulnerability (CNVD-2021-41718)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A denial of service vulnerability exists in CAJViewer. An attacker can exploit this vulnerability to cause the program to crash...

Huawei eCNS280_TD and ESE620X vESS licensing issue vulnerability

Huawei eCNS280TD is a core network device for the wireless broadband trunking system of Huawei China. Huawei ESE620X vESS is a virtual enterprise service controller of Huawei China. Huawei eCNS280TD and ESE620X vESS are vulnerable to an authorization issue that vulnerability stems from file acces...

Hackers Using Fake Foundations to Target Uyghur Minority in China

The Uyghur community located in China and Pakistan has been the subject of an ongoing espionage campaign aiming to trick the targets into downloading a Windows backdoor to amass sensitive information from their systems. "Considerable effort was put into disguising the payloads, whether by creatin...

Huawei ESE620X vESS buffer overflow vulnerability

Huawei ESE620X vESS is a virtual enterprise service controller from Huawei, China. A security vulnerability exists in ESE620X vESS, which is caused by an out-of-bounds read in a function that handles internal messages. An attacker could use this vulnerability to send a constructed exception messa...

编号撤回

This CVE number has been withdrawn...

Unauthorized Access Vulnerability in HG220G-U of China United Network Communications Group Limited

HG220G-U is a fiber optic cat from China United Network Communications Group Co. An unauthorized access vulnerability exists in the China United Network Communications Group Limited HG220G-U, which can be exploited by an attacker to unauthorizedly open a telnet service by constructing a specific...

Huawei S12700 Input Validation Error Vulnerability

Huawei S12700 is an enterprise switch product from Huawei China.The Huawei S12700 is vulnerable to an input validation error, which stems from insufficient validation of user-supplied input. An attacker could use the vulnerability to send specific messages and perform a denial of service DoS atta...

Huawei S5700 and S5800 Denial of Service Vulnerability

A denial-of-service vulnerability exists in the Huawei S5700 and Huawei S6700, both enterprise switches from Huawei of China. The vulnerability stems from a program that does not properly validate input. An attacker could use the vulnerability to cause a service exception on the target device by...

Weak Password Vulnerability in China Mobile's Enterprise Gateway

China Mobile Enterprise Gateway is a gateway management software that allows you to set up wifi settings, view detailed status and more. China Mobile Enterprise Gateway suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in China Mobile's Third-Party IPTV Management System

China Mobile is a GSM-based mobile communications operator, and is one of the "Big Three" telecom operators along with China Unicom and China Telecom. A command execution vulnerability exists in the third-party IPTV management system of China Mobile, which can be exploited by attackers to gain...

How Apple Gave Chinese Government Access to iCloud Data and Censored Apps

In July 2018, when Guizhou-Cloud Big Data GCBD agreed to a deal with state-owned telco China Telecom to move iCloud data belonging to Apple's China-based users to the latter's servers, the shift raised concerns that it could make user data vulnerable to state surveillance. Now, according to a...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-39062)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited, which can be exploited by attackers to obtain sensitive...

China Mobile An Lianbao WF-1 Router Command Injection (CVE-2021-30231; CVE-2021-30228; CVE-2021-30230; CVE-2021-30232; CVE-2021-30233; CVE-2021-30234)

A command injection vulnerability exists in China Mobile An Lianbao WF-1 router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Unauthorized Access Vulnerability in Management Information Technology Practical Training Cloud Platform of Changjie Tong Information Technology Co.

Ltd. is a company dedicated to providing platform services, application services, and value-added data services centered on financial and management services for small and medium-sized enterprises in China. An unauthorized access vulnerability exists in the Management Information Technology...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2021-37438)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to cause the program to crash...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2021-37437)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to cause the program to crash...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2021-37439)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to cause the program to crash...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2021-37435)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to cause the program to crash...

Huawei Manageone Denial of Service Vulnerability (CNVD-2022-20328)

Huawei Manageone, a cloud data center management solution from Huawei of China, suffers from a denial-of-service vulnerability that could be exploited by attackers to cause certain service anomalies...