China Academic Journals (CD-ROM Version) Electronic Magazine Company Limited CNKI has a logic flaw vulnerability

China Academic Journals CD-ROM Version Electronic Magazine Company Limited, scope of business: editing, publishing and distributing China Academic Journals CD-ROM Version; social sciences, science and technology, and literature. China Academic Journals CD-ROM Version Electronic Magazine Agency...

QNAP Systems Helpdesk Access Control Error Vulnerability (CNVD-2021-14803)

Qnap Systems QNAP Systems Helpdesk is a helpdesk application from China Wizlink Qnap Systems. An Access Control Error vulnerability exists in QNAP Systems Inc. Helpdesk versions prior to 3.0.3, which arises from improper access control and can be exploited by an attacker to gain control of a QNAP...

Second SolarWinds Attack Group Breaks into USDA Payroll — Report

There had been hints that a second group of malicious actors may have exploited a SolarWinds bug to install the Supernova backdoor — notably, there was a conclusion by Microsoft back in December that this was the case. Now, sources told Reuters that there’s indeed evidence that a separate advance...

A Second SolarWinds Hack Deepens Third-Party Software Fears

It appears that not only Russia but also China targeted the company, a reminder of the many ways interconnectedness can go wrong...

New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers

A financially-motivated threat actor notorious for its cryptojacking attacks has leveraged a revised version of their malware to target cloud infrastructures using vulnerabilities in web server technologies, according to new research. Deployed by the China-based cybercrime group Rocke , the...

SQL Injection Vulnerability in Changjie Tong Information Technology Co.

Ltd. is a company dedicated to providing platform services, application services, and value-added data services centered on financial and management services for small and medium-sized enterprises in China. Ltd. SQL injection vulnerability exists in SmoothJet, which can be exploited by attackers ...

Number withdrawn

This CVE number has been withdrawn...

2034, Part I: Peril in the South China Sea

“We've got a ship in duress that hasn't sent out a distress signal. Something doesn't add up.”...

Outgoing FCC Chair Issues Final Security Salvo Against China

Outgoing Federal Communications Chair Ajit Pai has issued a final warning about Chinese telcos at the end of a tenure spent cracking down on companies like Huawei, ZTE and China Telecom. Pai, a former telecommunications industry lobbyist and in-house counsel for Verizon, told Reuters that managin...

CAJViewer suffers from dll hijacking vulnerability

CAJViewer is a literature reading software that supports TEB, CAJ, NH, KDH and PDF format files from China Journal Network. CAJViewer suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious DLL, execute malicious code, and gain control of the host...

ASUS DSL-N14U-B1 code issue vulnerability

ASUS DSL-N14U-B1 is a router device from ASUS China. ASUS DSL-N14U-B1 1.1.2.3805 devices is vulnerable and can be exploited by attackers to upload arbitrary file content as a firmware update...

Mitsubishi Electric MELFA (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELFA FR Series, MELFA CR Series, MELFA ASSISTA Vulnerability: Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory is a follow-up to the original...

M&M Fdtcontainer Code Issue Vulnerability

M&M Fdtcontainer is a plug-and-play FDT framework application that can be customized to meet the needs of customers by China Meiming M&M. A code issue vulnerability exists in M&M fdtCONTAINER component Version 3, which can be exploited by an attacker to load a manipulated project file and malicio...

LU Master 6.0 official version has dll hijacking vulnerability

LU Master is a free system tool software in China. A dll hijacking vulnerability exists in LU Master 6.0 official version. An attacker can exploit this vulnerability to execute malicious code...

SkyCloud disk PC client for windows has dll hijacking vulnerability

Tianyi Cloud Drive is a cloud storage service product launched by China Telecom for individual and family users, positioning itself as a "data center for individuals and families", and providing cloud storage services such as cell phone album backup, multi-end file sharing, family album sharing,...

HGiga EIP Access Control Error Vulnerability

Hgiga HGiga EIP is a product of China Hengji Hgiga Corporation. An Access Control Error vulnerability exists in the HGiga EIP product, which stems from a lack of invalid access control on certain pages and can be exploited by an attacker to access a database or perform privileged functions...

Huawei EMUI Input Validation Denial of Service Vulnerability

Huawei Emui is an Android-based mobile operating system developed by Huawei of China. Huawei EMUI suffers from an input validation vulnerability, which can be exploited by remote attackers to submit special requests for out-of-bounds access and conduct denial-of-service attacks...

Denial of Service Vulnerability in China Mobile Communications Corporation GM619

China Mobile Communications Corporation Limited is a mobile communications operator with a business scope that includes: basic telecommunications services; value-added telecommunications services; and so on. A denial of service vulnerability exists in China Mobile Communications Group Limited...

Denial of Service Vulnerability in Multiple Gateways at China Mobile Communications Ltd.

China Mobile's business scope includes IP telephony, Internet access service, Internet backbone data transmission service, and the design of mobile communication, IP telephony and Internet networks. A denial of service vulnerability exists in multiple gateways of China Mobile Communications...

Huawei Emui and Honor Magic Ui buffer overflow vulnerability (CNVD-2022-52826)

Huawei Emui is an Android-based mobile operating system from Huawei, China.Honor Magic Ui is an Android-based mobile operating system from Honor, China. A buffer overflow vulnerability exists in Huawei Emui and Honor Magic Ui, which can be exploited by an attacker who can exploit the vulnerabilit...