Adobe Photoshop Buffer Overflow Vulnerability (CNVD-2022-20504)

Adobe Photoshop is a set of image processing software from the American company Odobi Adobe. Adobe Photoshop suffers from a buffer overflow vulnerability, which stems from the presence of cross-border write data in the software. An attacker could use this vulnerability to trigger arbitrary code...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is primarily used for 2D and 3D compositing, animation, and visual effects production. A buffer error vulnerability exists in Adobe After Effects that stems...

MuPDF 缓冲区错误漏洞

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A buffer error vulnerability exists in MuPDF, which stems from a color converter in the product's buffer that does not properly take into account the size of the hash table's maximum key, and can be exploited by ...

Data privacy: What's new in cross-border transfers? The Standard Contractual Clauses

The transfer of personal data between companies and countries is vital for smooth data processing operations. When transferring data out of the European Union, companies are required to comply with the General Data Protection Regulation GDPR which requires that any data that is transferred to a...

File upload vulnerability in Speedcat ERP backend management system

Ltd. is an e-commerce management product specially developed for cross border e-commerce platforms such as Selling, Amazon and Ebay. There is a file upload vulnerability in the Quickcat ERP backend management system, which can be exploited by attackers to control the server by uploading Trojan...

FFmpeg 输入验证错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which stems from dwauncompress in libavcodec/exr.c that does not strictly check dccount, and can be exploited by an attacker to cross-border array access...

SQL Injection Vulnerability in Cross-border E-commerce Integrated Platform of Hualei Information Technology Co.

Ltd. is a professional information technology service provider, the use of cutting-edge science and technology, we focus on providing efficient, high-quality information technology solutions and information technology products and services for logistics enterprises. A SQL injection vulnerability...

SQL Injection Vulnerability in Cross-border E-commerce Order System of Hualei Information Technology Co.

Founded in 2013, Hualei Information Technology Co., Ltd. is a professional information technology service provider. A SQL injection vulnerability exists in the cross-border e-commerce order system of Hualei Information Technology Co. An attacker can exploit the vulnerability to obtain sensitive...

SQL injection vulnerability in do***.htm page of cross-border e-commerce integrated platform of Shenzhen Hualei Logistics Information Technology Co.

Ltd. is an information technology service provider. Ltd. cross-border e-commerce integrated platform do.htm page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Hualei Technology's Integrated Platform for Cross-Border E-Commerce

Hualei Technology is a company that provides customers with a variety of high-quality e-commerce logistics integration services, including orders, warehousing, distribution management and supporting services, system solutions. A SQL injection vulnerability exists in the cross-border e-commerce...

Ltd. cross-border e-commerce integrated platform has SQL injection vulnerability

Ltd. was founded in 2013 as an information technology service provider. Ltd. cross-border e-commerce integrated platform suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Multiple Huawei products cross-border read vulnerability (CNVD-2020-28976)

The Huawei Honor Magic 2, among others, is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in several Huawei products. Attackers can exploit the vulnerability with the help of a specially crafted application to cause information leakage or service anomalies...

Multiple Huawei products cross-border read vulnerability (CNVD-2020-28979)

The Huawei AR1200, among others, is an enterprise router from Huawei, a Chinese company. The buffer error vulnerability exists in several Huawei products and stems from a failure to read data from the end of an expected buffer when parsing a specific message. An attacker could exploit the...

Guangzhou Lianya Network Technology Co., Ltd. UEESHOP exists logic flaws vulnerability Ueeshop exists logic flaws vulnerability

UEESHOP is a domestic self-built website platform focusing on cross-border e-commerce, providing fast self-built website services for cross-border e-commerce retail sellers and foreign trade exporters. Guangzhou Lianya Network Technology Co., Ltd UEESHOP has a logic flaw vulnerability. An attacke...

Huawei GaussDB 100 OLTP: Cross-Border Access Vulnerability (huawei-sa-20191204-01-gauss100)

There is an out-of-bounds read vulnerability in the Advanced Packages feature of the Huawei GaussDB 100 OLTP database. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the...

UEESHOP has a flawed logic vulnerability

UEESHOP is a domestic self-built website platform focusing on cross-border e-commerce, providing fast self-built website services for cross-border e-commerce retail sellers and foreign trade exporters. UEESHOP has a logic flaw vulnerability. Attackers can use the vulnerability to obtain sensitive...

eIDAS-Node 2.3 Authentication Bypass Exploit

Exploit for multiple platform in category web applications ======================================================================= title: Authentication Bypass product: eIDAS-Node vulnerable version: =v2.3 v2.1 vulnerability 2 fixed version: v2.3.1 CVE number: - impact: critical homepage:...

eIDAS-Node 2.3 Authentication Bypass

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Authentication Bypass product: eIDAS-Node vulnerable version: =v2.3 v2.1 vulnerability 2 fixed version: v2.3.1 CVE number: - impact: critical homepage:...

CVE-2019-15846: the exim remote access to root privileges vulnerability alerts-a vulnerability alert-the black bar safety net

GMT 2019 9 November 6 December 18: 00 PM, the exim release exim-4.92.2 version fixes CVE-2019-15846, an attacker can use this vulnerability to remotely obtain root privileges. Vulnerabilities from qualys to find and report. 360CERT determine the vulnerability to hazards and the impact is large...

Council of EU Law Enforcement Protocol improves cross-border cooperation

Last March, the Council of the European Union announced the new EU Law Enforcement Emergency Response Protocol to address the growing problem of planning and coordinating between governments, agencies, and companies when cyberattacks occur across international boundaries. Remember well-known...