Command Execution Vulnerability in Zero Degrees of Space at Jiangyin Leader Information Technology Co.

Jiangyin Leader Information Technology Co., Ltd. was founded in 2006 by visiting scholars from the University of Copenhagen, Denmark, is a high-tech enterprise specializing in the development of application management software and Internet application technology development. Jiangyin City Leader...

Unspecified Vulnerability in Red Hat 3scale

Red Hat 3scale is a suite of API Application Programming Interface lifecycle management software from Red Hat. A security vulnerability exists in 3scale that stems from the fact that the development portal login form does not validate CSRF tokens, and therefore does not protect against login CSRF...

HPESBUX04166 rev.2 - HPE HP-UX System Management Homepage, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX System Management Software A.3.2.21.03 or earlier HPE System Management Homepage A.3.2.21.03 or earlier CVSS Scores: | CV...

XSS Vulnerability in Impression Notes Windows Client

Impression Notes is an excellent electronic notes data management software. An XSS vulnerability exists in the Impression Notes Windows client, which can be exploited by an attacker to obtain user cookie information...

Weak password vulnerability in gateway management software of Hangzhou Sanhui Information Engineering Co.

Hangzhou Sanhui Information Engineering Co., Ltd. is specializing in the field of computer communications integration CTI, focusing on the production and development of voice products and applications in various industries, is the earliest in the country engaged in the development of voice...

The vulnerability of Cisco Firepower Management Center’s network management software, related to resource exhaustion, allows a intruder to trigger a service failure.

The vulnerability of Cisco Firepower Management Center’s network management software is related to resource exhaustion. Exploiting this vulnerability can allow a malicious actor to deny service to the system...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

HPE IlO Amplifier Pack 跨站脚本漏洞

HPE IlO Amplifier Pack is a database management software for use in clustered environments from HPE, USA. The software supports Gen8, Gen9 and Gen10 Hewlett Packard Enterprise automatic update of firmware, drivers, support for manual or automatic recovery of firmware damage to the system, maximiz...

The vulnerability of Delta Industrial Automation’s COMMGR software, related to buffer overflow in the stack, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Delta Industrial Automation COMMGR communication management software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Kingdee Cloud-Star has Arbitrary File Read Vulnerability

Kingdee Cloud-Star is a new generation of strategic enterprise management software developed by Kingdee Software China Co. Ltd. based on cutting-edge technologies such as cloud computing, big data, social networking, artificial intelligence and Internet of Things. There is an arbitrary file read...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-37726)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite.Oracle E-Busines...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-39939)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is seamlessly integrated with a management suite.Oracle Trade...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-30940)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite.Oracle Sales...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-30941)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite.Oracle Sales...

SQL Injection Vulnerability in Production Management Software System of Jiangsu Hans Future Information Technology Co.

Jiangsu Hans Future Information Technology Co., Ltd, formerly known as "Huai'an Qixi Software Co., Ltd", was founded in 2009, is a technology-based enterprise mainly engaged in software development and sales. There is a SQL injection vulnerability in the production management software system of...

Unauthorized Access Vulnerability in OA System of Beijing Zhiyuan Internet Software Co.

Founded in 2002, Beijing Zhiyuan Internet Software Co., Ltd. is a high-tech enterprise always focusing on the field of collaborative management software, providing customers with professional collaborative management software products, solutions, platforms and cloud services. An unauthorized acce...

SQL Injection Vulnerability in Lotus Commercial Concrete Management Software of Hangzhou Lotus Software Co.

Hangzhou Lotus Software Co., Ltd, was registered in Hangzhou on 2004-01-07, belongs to the software and information technology services industry, the main industry is software and information technology services industry, the number of employees 5 people, the registered capital of 1 million yuan...

Unauthorized Access Vulnerability in Wave ClusterEngine

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. An unauthorized access vulnerability exists in Wave ClusterEngine, which can be exploited by attackers to obtain sensitive information...

PT-2021-15430 · Eaton · Eaton Intelligent Power Manager

Name of the Vulnerable Software and Affected Versions: Eaton Intelligent Power Manager IPM versions prior to 1.69 Description: The issue concerns an unauthenticated eval injection vulnerability. It arises because the software fails to neutralize code syntax from users before using it in the dynam...

Weak password vulnerability in AVA interactive management software of Guangzhou Ovia Electronic Technology Co.

Ltd. is a high-tech enterprise focusing on the research and development, production, sales and service of education informatization products. There is a weak password vulnerability in the AVA Interactive Management Software of Guangzhou Ovia Electronic Technology Co., Ltd, which can be exploited ...