CVE-2021-40542

Opensis-Classic Version 8.0 is affected by cross-site scripting XSS. An unauthenticated user can inject and execute JavaScript code through the linkurl parameter in Ajaxurlencode.php...

CVE-2021-40543

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...

CVE-2021-40542

Opensis-Classic Version 8.0 is affected by cross-site scripting XSS. An unauthenticated user can inject and execute JavaScript code through the linkurl parameter in Ajaxurlencode.php...

CVE-2021-40543

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...

Sql injection

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...

Cross site scripting

Opensis-Classic Version 8.0 is affected by cross-site scripting XSS. An unauthenticated user can inject and execute JavaScript code through the linkurl parameter in Ajaxurlencode.php...

CVE-2021-40542

Opensis-Classic Version 8.0 is affected by cross-site scripting XSS. An unauthenticated user can inject and execute JavaScript code through the linkurl parameter in Ajaxurlencode.php...

CVE-2021-40542

Opensis-Classic 8.0 is affected by a Cross-Site Scripting (XSS) vulnerability via the link_url parameter in Ajax_url_encode.php. An unauthenticated attacker can inject and execute JavaScript in users’ browsers. The relevant connected data confirms affected software/version and the vulnerable para...

CVE-2021-40543

OpenSIS OpenSIS Classic 8.0 is affected by a SQL injection in PasswordCheck.php due to lack of sanitization of input data for $_GET['usrid'] and $_GET['prof_id']. The vulnerability allows an attacker to inject SQL and, as described in CNVD/CNNVD variants, could enable retrieval of database inform...

The vulnerability of the Bluetooth Classic implementation in the microprogramming software for the Bluetrum AB32VG1 board allows a intruder to cause the device to freeze and reboot.

The vulnerability of the Bluetooth Classic microprogramming software implementation on the Bluetrum AB32VG1 board is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause the device to freeze and restart...

The vulnerability of the Bluetooth Classic implementation of the microprogramming software for the ESP-WROVER-KIT development board, which is used for the ESP32 Wi-Fi/Bluetooth module series, allows a hacker to execute arbitrary code.

The vulnerability of the Bluetooth Classic implementation of the microprogramming software for the ESP-WROVER-KIT development board for the ESP32 Wi-Fi/Bluetooth series modules is related to insufficient verification of input data. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the Bluetooth Classic environment for developing IoT applications exists due to insufficient verification of input data, allowing attackers to trigger service failures.

The vulnerability of the Bluetooth Classic environment for developing IoT applications exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Bluetooth Classic environment for developing IoT applications allows a attacker to execute arbitrary code.

The vulnerability of the Espressif esp-idf software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Cypress WICED BT Bluetooth Classic stack implementation for the CYW20735B1 device arises due to insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the Cypress WICED BT Bluetooth Classic stack implementation for the CYW20735B1 device exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failure...

The vulnerability of the Bluetooth Classic microprogramming system implementation of the Zhuhai Jieli Technology AC6366C_DEMO_V1.0 device allows a perpetrator to trigger an emergency shutdown and restart of the device.

The vulnerability of the Bluetooth Classic microprogramming device implementation of Zhuhai Jieli Technology AC6366CDEMOV1.0 is related to buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause an unexpected failure and restart of the device...

The vulnerability of the Bluetooth Classic microprogramming device implementation for CC256xCQFN-EM devices allows a intruder to cause a service failure.

The vulnerability of the Bluetooth Classic microprogramming device implementation for CC256xCQFN-EM devices is related to overflow errors in dynamic memory buffers. Exploiting this vulnerability can allow a remote attacker to cause the device to fail to perform its functions...

The vulnerability of the Bluetooth Classic microprogramming device implementations of Zhuhai Jieli AC690X and AC692X arises due to insufficient verification of input data. This allows attackers to trigger malfunctions in the device’s service.

The vulnerability of the Bluetooth Classic microprogramming system implementation in Zhuhai Jieli AC690X and AC692X devices exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through the created...

The vulnerability of the Bluetooth Classic microprogramming system implementation in Zhuhai Jieli AC690X devices arises due to insufficient verification of input data. This allows attackers to trigger malfunctions in the service process.

The vulnerability of the Bluetooth Classic microprogramming system implementation in Zhuhai Jieli AC690X devices exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause service failures through the created LMP packet...

The vulnerability in the Bluetooth Classic environment for IoT application development, related to writing beyond the buffer boundaries in memory, allows a intruder to trigger a service failure.

The vulnerability in the Bluetooth Classic environment for IoT application development, espressif esp-idf, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted LMP package...

The vulnerability of the Bluetooth Classic microprogramming device implementations of Zhuhai Jieli AC690X and AC692X arises due to insufficient verification of input data. This allows attackers to trigger malfunctions in the device’s service.

The vulnerability of the Bluetooth Classic microprogramming system implementation in Zhuhai Jieli AC690X and AC692X devices exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through the created...