SQL Injection Vulnerability in Order Management System of Baojian Logistics Enterprise Group Co.

Ltd. is the earliest professional third-party logistics enterprise in China to provide customers with integrated logistics services by applying modern logistics concepts. There is a SQL injection vulnerability in the order management system of Baoshuai Logistics Enterprise Group, which can be...

FiberHome AN5506-04-FA Trust Management Issues Vulnerability

FiberHome AN5506-04-FA is a router from China Fiberhome.Fiber is an open source web framework written in Go. A trust management issue vulnerability exists in FiberHome AN5506-04-FA, which can be exploited by an attacker to attack affected components using default passwords or hard-coded passwords...

The vulnerability of the Jackson-databind library in the FasterXML project allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Jackson-databind library in the FasterXML project relates to the restoration of unreliable data in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

honeyview is vulnerable to dll hijacking

Honeyview is an image viewing program. Honeyview suffers from a dll hijacking vulnerability that can be exploited by an attacker to gain privileges on the victim's host...

Weak password vulnerability in Syrotech SY-GPON-1110-WDAONT and SY-GPON-1110-WDCONT backends

The SY-GPON-1110-WDAONT and SY-GPON-1110-WDCONT are Syrotech routers, respectively. A weak password vulnerability exists in the backend of the Syrotech SY-GPON-1110-WDAONT and SY-GPON-1110-WDCONT, which can be exploited by an attacker to successfully log in to the backend management system and...

XINJE XDME-30T4-E Ethernet Protocol Denial of Service Vulnerability

XINJE XDME-30T4-E is a controller product of Ethernet type series. A denial of service vulnerability exists in the XINJE XDME-30T4-E Ethernet protocol, which can be exploited by attackers to cause the device to go down and not function properly...

Kingdee KIS Professional Edition has a power lifting vulnerability

Kingdee KIS is an ERP software, ERP system integrates supply chain management, financial management, human resource management, customer relationship management, office automation, business analysis, mobile commerce, integrated interfaces and industry plug-ins and other business management...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-10263)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An input validation error vulnerability exists in ImageMagick, where MagickCore/statistic.c in versions prior to ImageMagick 7.0.9-0 has a range of representable values...

ImageMagick integer overflow vulnerability (CNVD-2021-10261)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An integer overflow vulnerability exists in MagickCore/statistic.c in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting ...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Sophos Unified_Threat_Management_Software

SSHTron SSHTron is a multiplayer lightcycle game that runs through SSH. 通过下面命令连接到游戏: $ ssh 192.168.1.111:2022 Controls: WASD or vim keybindings to move do not use your arrow keys. Escape or Ctrl+C to exit. Want to choose color yourself? 有7种颜色可供选择: Red, Green, Yellow, Blue, Magenta, Cyan and White...

Unspecified Vulnerability in GNU C Library (CNVD-2021-26206)

The GNU C Library glibc, libc6 is an open-source, free C language compiler released under the LGPL license.Library is one of the libraries. A security vulnerability exists in the GNU C Library aka glibc versions prior to 2.2. The vulnerability stems from a missing statement about the unspecified...

The vulnerability of the Intel LED Manager for NUC software, related to authentication deficiencies, allows a hacker to trigger a service failure.

The vulnerability of the Intel LED Manager for NUC software-related lighting control systems is related to authentication deficiencies. Exploiting this vulnerability could allow an attacker to cause malfunctions in the system’s operation...

The vulnerability of the software system for managing enterprise assets in IBM Maximo Asset Management lies in the insufficient verification of incoming requests, allowing a hacker to execute an SSRF attack.

The vulnerability of the IBM Maximo Asset Management software system for managing corporate assets is related to insufficient verification of incoming requests. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute an SSRF attack...

Unspecified vulnerability in cPanel (CNVD-2021-28345)

cPanel is a set of Web-based host control management system of the U.S. cPanel. A security vulnerability exists in cPanel versions prior to 88.0.3. An attacker can exploit the vulnerability to obtain sensitive information...

Downloads Resources over HTTP in adamvr-geoip-lite

Affected versions of adamvr-geoip-lite insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. This could impact the integrity and availability of the data being used to make geolocation decisions b...

CVE-2020-9596

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass...

Baxter Phoenix Hemodialysis Delivery System (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Baxter Equipment: Phoenix Hemodialysis Delivery System Vulnerability: Cleartext Transmission of Sensitive Information 2. UPDATE INFORMATION This updated advisory is a follow-up to the original...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2021-22917)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. A privilege vulnerability exists in...

VulnCheck KEV: CVE-2020-1938

Apache Tomcat treats Apache JServ Protocol AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...