Google Android Code Execution Vulnerability (CNVD-2024-02677)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused by use after release in gattprocessprepwritersp in gattcl.cc. An attacker can exploit this vulnerability to execute arbitrary code on the system...

OpenCart has an unspecified vulnerability (CNVD-2024-29656)

OpenCart is an open source e-commerce system from the OpenCart team in Hong Kong, China. The system provides product reviews, product ratings, product additions and other modules. A security vulnerability exists in OpenCart version v4.0.2.2, which originates from the login page being vulnerable t...

Cisco Identity Services Engine Authorization Issues Vulnerability (CNVD-2023-79690)

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. Cisco Identity Services Engine suffers from an...

Google Chrome Accessibility Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in Google Chrome Accessibility, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service...

Jeecg-Boot SQL Injection Vulnerability (CNVD-2023-70070)

Jeecg-Boot is a low-code platform based on a code generator. A SQL injection vulnerability exists in Jeecg-Boot v3.5.3 and earlier versions, which stems from a lack of validation of externally entered SQL statements in the component /jeecg-boot/jmreport/show. An attacker can exploit this...

Unauthorized Access Vulnerability in LiveNVR of Anhui Green Persimmon Information Technology Co. Ltd (CNVD-2023-77604)

Anhui Green Persimmon Information Technology Co., Ltd. is a company whose business scope includes: computer hardware and software development and sales, technical services, technical consulting, technology transfer; web page design; design, installation and maintenance of network equipment;...

Google Android elevation of privilege vulnerability (CNVD-2023-75540)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

Google Android elevation of privilege vulnerability (CNVD-2023-75537)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

Google Android elevation of privilege vulnerability (CNVD-2023-75544)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to escalate privileges...

Zoo Management System SQL Injection Vulnerability (CNVD-2023-72245)

Zoo Management System is a zoo management system. It provides an online and automated platform for zoo organizations to manage their daily records. Zoo Management System v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements on th...

answer Access Control Error Vulnerability (CNVD-2023-72246)

answer is an open source knowledge-based community software. An Access Control Error vulnerability exists in versions prior to answer v1.1.3 that stems from a lack of authentication for critical functions. An attacker can exploit the vulnerability can change roles including administrator...

Logic flaw vulnerability in LiveGBS of Anhui Green Persimmon Information Technology Co., Ltd (CNVD-2023-78381)

LiveGBS is a national standard GB28181 streaming media service software , can provide to provide user management and Web visualization page management , open source front-end page source code ; to provide device status management , you can real-time view of whether the device is offline and other...

Linux kernel elevation of privilege vulnerability (CNVD-2023-70085)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an elevation of privilege vulnerability that can be exploited by an attacker to cause a local elevation of privilege...

Unauthorized Access Vulnerability in LiveSMS of Anhui Green Persimmon Information Technology Co.

Anhui Green Persimmon Information Technology Co., Ltd. is a company whose business scope includes: computer software and hardware development and sales, technical services, technical consulting, technology transfer; web page design; Internet information services and so on. There is an unauthorize...

Unauthorized Access Vulnerability in LiveNVS of Anhui Green Persimmon Information Technology Co.

LiveNVS is a solution dedicated to centralized management of LiveNVRs.... Anhui Green Persimmon Information Technology Co. LiveNVS has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Linux kernel elevation of privilege vulnerability (CNVD-2023-70081)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an elevation of privilege vulnerability that can be exploited by an attacker to cause a local elevation of privilege...

Anhui Green Persimmon Information Technology Co., Ltd. has a logic flaw vulnerability in LiveQing (CNVD-2023-78411)

LiveQing Aoki video streaming service solution. Anhui Green Persimmon Information Technology Co., Ltd LiveQing has a logic flaw vulnerability that can be exploited by attackers to add arbitrary users...

Tenda AC6 Denial of Service Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A denial of service vulnerability exists in the Tenda AC6. The vulnerability stems from a failure to properly handle incoming error messages and can be exploited to cause a denial of service device crash via a long string in the...

LiveNVR of Anhui Green Persimmon Information Technology Co.

LiveNVR is a streaming media server software solution. Anhui Green Persimmon Information Technology Co., Ltd LiveNVR has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...

Apache Superset Information Disclosure Vulnerability (CNVD-2023-70276)

Apache Superset is an open source data visualization tool based on Python. A security vulnerability in the Apache Superset stack trace error handling can be exploited by a remote attacker to submit a special request that can obtain sensitive information...