63 matches found
CVE-2021-41872
The CVE-2021-41872 entry concerns Skyworth Digital Technology’s Penguin Aurora Box 41502, a networked set‑top box, with a denial of service vulnerability. The available Connected documents confirm the affected product is the Penguin Aurora Box family (specifically version 41502) and identify the ...
Easytest Cross-Site Scripting Vulnerability
Easytest is an online learning quiz platform of China's Huaju Digital Technology Co. Easytest suffers from a cross-site scripting vulnerability that could be exploited by remote attackers to inject JavaScript and perform stored XSS attacks...
Easytest SQL Injection Vulnerability
Easytest is an online learning quiz platform of China's Hua Ju Digital Technology, Inc. Easytest is vulnerable to SQL injection, which can be exploited by attackers to inject SQL commands into the parameters of the elective course management page after gaining user privileges to gain all database...
Easytest SQL Injection Vulnerability (CNVD-2021-83597)
Easytest is an online learning quiz platform of China's Hua Ju Digital Technology, Inc. Easytest is vulnerable to SQL injection, which can be exploited by attackers to inject SQL commands into the parameters of the learning history page after gaining user privileges to access all databases and ga...
CVE-2021-42335 Huachu Digital Technology Co.,Ltd. Easytest - Stored XSS
Easytest bulletin board management function of online learning platform does not filter special characters. After obtaining a user’s privilege, remote attackers can inject JavaScript and execute stored XSS attack...
CVE-2021-42333 Huachu Digital Technology Co.,Ltd. Easytest - SQL Injection-1
The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database and obtain administrator permissions...
CVE-2021-37213 Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-2
The check-in record page of Flygo contains Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record...
CVE-2021-37211 Larvata Digital Technology Co. Ltd. FLYGO - Stored XSS
The bulletin function of Flygo does not filter special characters while a new announcement is added. Remoter attackers can use the vulnerability with general user’s credential to inject JavaScript and execute stored XSS attacks...
Binary Vulnerability in OFD Version Reader of Beijing Numerical Network Technology Limited Liability Company (CNVD-2021-49108)
OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...
Binary Vulnerability in OFD Version Reader of Beijing Numerical Network Technology Limited Liability Company (CNVD-2021-49110)
OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...
Binary Vulnerability in OFD Layout Reader of Beijing Numerical Network Technology Co.
OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...
Binary Vulnerability in OFD Version Reader of Beijing Numerical Network Technology Limited Liability Company (CNVD-2021-49112)
OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...
SQL Injection Vulnerability in Medical Virtual Simulation Teaching Experiment Platform of Shanghai Dream Road Digital Technology Co.
Medical virtual simulation teaching experiment platform is a virtual reality system with computer virtual reality and digital simulation technology as the core, biosimulation engine, processing factor database, virtual environment interface and other technologies as the support. Shanghai Dream Ro...
Weak password vulnerability in Hikvision security access gateway
Hangzhou Hikvision Digital Technology Co., Ltd. is a leading provider of security products and industry solutions. A weak password vulnerability exists in the Hikvision security access gateway. An attacker can utilize the vulnerability to log into the backend and obtain sensitive information...
FDCMS SQL Injection Vulnerability
FDCMS is a PHP-based content management system of Sichuan Method Digital Technology Co. A SQL injection vulnerability exists in FDCMS version 4.0. An attacker can use this vulnerability to inject malicious SQL via Admin/Lib/Action/FloginAction.class.php to obtain database records...
File uploading vulnerability in the smart water information management platform
Huatech Digital Technology Co., Ltd. formerly Shanda Luneng Information Technology Co., Ltd. was jointly invested and established by Shandong University and Luneng Group in December 2000, which is now subordinate to Shandong Province State-owned Assets Supervision and Administration Commission...
Weak password vulnerability in Network Video Recorder of Hangzhou Hikvision Digital Technology Co.
Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. A weak password vulnerability exists in Network Video Recorder of Hangzhou Hikvision Digital Technology Co. Ltd, which can ...
Skyworth Digital Technology RN510 Buffer Overflow Vulnerability
The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. A buffer overflow vulnerability exists in /cgi-bin/app-staticIP.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. An attacker could exploit this vulnerability by sending a specially crafted reque...
Skyworth Digital Technology RN510 Access Control Error Vulnerability
The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. An access control error vulnerability exists in /cgi-bin/testversion.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. An attacker can exploit the vulnerability to obtain the SSID password and We...
Skyworth Digital Technology RN510 Cross-Site Request Forgery Vulnerability
The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. A cross-site request forgery vulnerability exists in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. No detailed vulnerability details are...