CVE-2021-22195

Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system...

MuleSoft Mule 代码问题漏洞

Mulesoft MuleSoft Mule is a lightweight integration platform from the US company MuleSoft Mulesoft. The platform supports management of message routing between nodes, data mapping, and more. A code issue vulnerability exists in MuleSoft Mule, which originates in the Mule runtime component. The...

Data Edge CA eHealth Performance Manager 代码问题漏洞

Data Edge CA eHealth Performance Manager is an application from Data Edge Ireland. provides real-time and predictive performance analytics to take corrective action before business processes are negatively impacted. A code issue vulnerability exists in Data Edge CA eHealth Performance Manager...

Bosch BVMS 代码问题漏洞

Bosch BVMS is an application system from Bosch, Germany. It is used for video management. A code issue vulnerability exists in Bosch BVMS and BVMS Viewer, which can be exploited by an attacker to execute arbitrary code on the victim's system...

Bosch Video Client 代码问题漏洞

Bosch Video Client is an application from the German company Bosch. It is used to display cameras connected to the network in real time. A code issue vulnerability exists in Bosch Video Client, which can be exploited by an attacker to execute arbitrary code on a victim's system...

OpenSSL 代码问题漏洞

OpenSSL is an open source capable general-purpose cryptographic library from the Openssl team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. The product supports a variety of cryptographic algorithms , including symmetric ciphers , hash algorithms ,...

Remote code execution

Azure Sphere Unsigned Code Execution Vulnerability...

NTT TechnoCross MagicConnect 代码问题漏洞

NTT TechnoCross MagicConnect is an application software from NTT TechnoCross Japan. It provides a service to operate an office PC by invoking the screen image of a remote device. MagicConnect suffers from a code issue vulnerability that allows an attacker to gain privileges and execute arbitrary...

CVE-2021-21186

Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code...

CVE-2021-21480

SAP MII allows users to create dashboards and save them as JSP through the SSCE Self Service Composition Environment. An attacker can intercept a request to the server, inject malicious JSP code in the request and forward to server. When this dashboard is opened by users having at least SAPXMII...

Siemens SIMATIC 代码问题漏洞

Siemens SIMATIC is a configuration software from Siemens. A code issue vulnerability exists in Siemens SIMATIC, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Samsung Pay mini information leakage vulnerability

Samsung Pay mini is a mobile application from Samsung South Korea. It provides a mobile payment function. An information disclosure vulnerability exists in the Samsung Pay mini application prior to v4.0.14, which allows unauthorized users to access balance information by scanning a specific QR co...

Linux kernel code issue vulnerability (CNVD-2021-14401)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in Linux Kernel versions prior to 5.11. The vulnerability stems from the failure of the scosockgetsockopt function in net/bluetooth/sco.c to...

Sven gopeak masterlab code issue vulnerability

Sven gopeak masterlab is a Sven open source application. Provides simple and efficient , agile development based project management tools . gopeak masterlab 2.1.5 A code issue vulnerability exists in the Upgrade.php source parameter...

Webware Webdesktop 代码问题漏洞

Webware Webdesktop is an application software from the company Webware in the Republic of Estonia. A document management software. A code issue vulnerability exists in Webware Webdesktop version 5.1.15. The vulnerability stems from the system allowing an attacker to read all files on the server. ...

SOURCEFORGE Adminer Code Issue Vulnerability

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. It provides database management in a single PHP file. A code issue vulnerability exists in SOURCEFORGE Adminer that arises from improper design or implementation during code development of a web-based system or product...

Linux kernel code issue vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in the Linux kernel that arises from a lack of effective privilege licensing and access control measures in a networked system or product...

Adobe Acrobat and Reader Use After Free (APSB21-09: CVE-2021-21033)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Linux kernel code issue vulnerability (CNVD-2021-19427)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a code issue vulnerability that can be exploited by an attacker to trigger a denial of service by forcing a null pointer dereference via...

Micrium uC-HTTP Code Issue Vulnerability

Micrium uC-HTTP is a software from Micrium USA that provides TCP/IP functionality for devices. The software is designed for embedded applications with a compact, reliable, high-performance TCP/IP stack with dual support for IPv4 and IPv6. A code issue vulnerability exists in Micrium uC-HTTP versi...