CVE-2020-35568

MB Connect Line products mbCONNECT24, mymbCONNECT24, and Helmholz MyREX24/MyREX24.virtual (versions through 2.11.2) are affected by CVE-2020-35568 due to an incomplete filter on a database response that allows an authenticated attacker to gain non-public information about other users and devices ...

CVE-2021-27235

Mutare Voice (EVM) 3.x before 3.3.8 contains an insecure admin-portal export at diagzip.asp that allows unauthenticated users to export database tables. Root cause is a misconfigured export function without proper access controls, enabling potential data disclosure. Affected product: Mutare Voice...

Jinan Yuxia Information Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-16393)

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...

Wenzhou Yougu Technology Co., Ltd. website building system has SQL injection vulnerabilities (CNVD-2021-16396)

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Technology Co., Ltd. station building system there is a SQL injection vulnerability, th...

Wenzhou Yougu Technology Co., Ltd. website building system has SQL injection vulnerabilities (CNVD-2021-16394)

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Technology Co., Ltd. station building system there is a SQL injection vulnerability, th...

The vulnerability of the SQLite database management system, related to writing data beyond the buffer boundaries in memory, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the SQLite database management system is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SQL Injection Vulnerability in the Website Building System of Guangzhou Benying Computer Technology Co.

Guangzhou Benying Computer Technology Co., Ltd. is committed to building the Internet + business ecology, especially focusing on the field of mobile Internet, to provide APP development, system development, small program and WeChat public number secondary development, website construction and oth...

Design/Logic Flaw

SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to tamper with it and alter it in a way that the digest continues to be the same and without invalidatin...

SQL Injection Vulnerabilities in the Website Building System of Jingzhou Huacheng Network Information Technology Co.

Jingzhou Huacheng Network Information Technology Co., Ltd. is a set of website planning and construction, network optimization and promotion, software research and development, hotel management system agent sales as well as large-scale website operation and other projects as one of the profession...

SQL Injection Vulnerability in Website Building System of Jingzhou Huacheng Network Information Technology Co. Ltd (CNVD-2021-14436)

Jingzhou Huacheng Network Information Technology Co., Ltd. is a set of website planning and construction, network optimization and promotion, software research and development, hotel management system agent sales as well as large-scale website operation and other projects as one of the profession...

SQL Injection Vulnerability in Website Building System of Guangzhou Huanuo Computer Technology Co.

Guangzhou Huanuo Computer Technology Co., Ltd. is an integrated Internet application service provider. Guangzhou Huanuo Computer Science and Technology Co., Ltd. website building system has a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the...

CVE-2020-10554

CVE-2020-10554 affects Psyprax before 3.2.2. The issue is that passwords used to encrypt data are stored in the database in an obfuscated format that can be easily reverted (e.g., AAAAAAAA stored as MMMMMMMM). The Red Hat and NVD entries corroborate this description. The available documents do no...

SQL Injection Vulnerability in Enterprise Collaboration Office System

Chengdu Excellence Yuan Yang Information Technology Co., Ltd. is a company dedicated to providing management software for enterprises. An SQL injection vulnerability exists in the Enterprise Management Bao Collaboration Office System, which can be exploited by attackers to obtain sensitive...

SQL injection vulnerability in the pr***.asp page of the website building system of Ruian Uber Technology Co. Ltd (CNVD-2021-15516)

Ltd. is a social public to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM desig...

Ship 100 virtual goods autoship system bu***.php page has sql injection vulnerability

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Ship 100 virtual goods autoship system bu.php page there is a sql injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

2021 KuppingerCole Leadership Compass names Imperva an overall leader for Database and Big Data Security

It is my pleasure to report that in their 2021 overview of the market for Database and Big Data Security solutions, leading technology analyst KuppingerCole has identified Imperva as an Overall Leader for the first time. Imperva scored five out of five for product security, functionality,...

SQL Injection Vulnerability in Tanaosoft Towel Textile ERP System

Ltd. was formerly known as "Huai'an Qixi Software Co., Ltd.", is a dual-soft certification, with independent computer software research and development capabilities, software development and sales-oriented technology-based enterprises. A SQL injection vulnerability exists in the Tanaosoft Towel...

Hardcoded credentials

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of...

CVE-2020-6780

Affected products: Bosch FSM-2500 server and Bosch FSM-5000 server (up to version 5.2). Root cause: use of a database password hash with insufficient computational effort (MD5), enabling credential disclosure. Impact: a remote attacker with admin privileges can dump other users’ credentials and m...

SQL Injection Vulnerability in Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion and so on. Ltd. has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...