Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei, China. An input validation error vulnerability exists in the System Applications module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from the program's inability to...

JTEKT TOYOPUC-Plus 安全漏洞

JTEKT TOYOPUC-Plus is a PLC from JTEKT Japan. A security vulnerability exists in the JTEKT TOYOPUC that stems from the affected product's inability to properly handle ICMP flooding, which could allow an attacker to deny Ethernet communication between affected devices. The following products and...

There is a dll hijacking vulnerability in Youdao Dictionary pc side

Youdao Dictionary is the world's first all-around free language translation software based on search engine technology produced by NetEase Youdao. A dll hijacking vulnerability exists in Youdao Dictionary pc, which can be exploited by attackers to gain control of the server...

[SECURITY] Fedora 33 Update: pngcheck-2.3.0-3.fc33

pngcheck verifies the integrity of PNG, JNG and MNG files by checking the internal 32-bit CRCs checksums and decompressing the image data; it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statist i...

Command Execution Vulnerability in the PC Client of HuaxiaYunCai.com

Huaxia Cloud Finance PC Client is a financial management software. A command execution vulnerability exists in Huaxia Yun Cai Network PC Client. An attacker can exploit the vulnerability to execute arbitrary code...

Command Execution Vulnerability in Flying Book PC Client Software

Flybook deeply integrates instant communication, calendar, audio/video conferencing, cloud documents, cloud disk, mailbox and workbench, and through the open and compatible platform, members can realize efficient communication and smooth collaboration in one place, and improve the efficiency of...

Command Execution Vulnerability in NetEase Email Master PC Client Software

Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports all-platform device login. Netease Email Master pc client software has a command execution vulnerability that can b...

Tencent Document pc client software suffers from a command execution vulnerability

Tencent Document is an online document that can be edited by multiple people at the same time, supporting online Word/Excel/PPT/PDF/collection form multiple types. Tencent Document pc client software has a command execution vulnerability that can be exploited by an attacker to gain control of the...

Command Execution Vulnerability in Scholastic Pepperdine's pc Client

Scholastic Premium is a deeply customized service-based app for Scholastic Premium students. A command execution vulnerability exists in the Scholastic Premium pc client, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Haozitong Cloud Conference PC Version

GoodVision Cloud Meeting for PC is a platform developed for video conferencing offices. A command execution vulnerability exists in GoodView Cloud Meeting PC Edition, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Forbidden Notes pc Client Software

Weizhi Notes is located in the high-efficiency work notes, the main work notes of the mobile application, is currently a "work notes" cloud note products. A command execution vulnerability exists in the Weizhi Notes pc client software, which can be exploited by an attacker to gain control of the...

CVE-2020-24162

The Shenzhen Tencent app 5.8.2.5300 for PC platforms from Tencent App Center has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code...

Memory Corruption Vulnerability in WPS Office 2019 for PC (CNVD-2020-41304)

WPS Office 2019 PC version is the software of Zhuhai Kingsoft Office Software Co. Ltd, which can realize the text, table, presentation and many other functions commonly used in office software. A memory corruption vulnerability exists in WPS Office 2019 PC Edition. An attacker can exploit this...

CVE-2020-1831

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

Arbitrary Code Execution

gimp is vulnerable to arbitrary code execution. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially-crafted BMP or PCX image file that,...

Command Execution Vulnerability in Jiu Fang Zhi Investment PC Client

Jiufang Wisdom Investment is a computerized stock speculation software. A command execution vulnerability exists in the Jiu Fang Zhi Investment PC client, which can be exploited by attackers to execute malicious code...

Code Execution Vulnerability in Grape Game Room for PC

Grape Game Room is a game center for Smart TVs and Smart Set Top Boxes, providing large-scale Smart TV games, single-player games, two-player games and online games for all players. A code execution vulnerability exists in the PC version of Grape Game Hall, which can be exploited by attackers to...

Dll Hijacking Vulnerability in Thousand Music PC Client

Thousand Music is part of Taihe Music Group under Baidu, and is one of the music portals in China. Thousand Music Client is a music playback software under Thousand Music that supports a variety of audio formats, has a new audio engine developed independently, and combines playback, sound effects...

115 PC version suffers from dll hijacking vulnerability

115 PC version is a collection of 115, 115 organization, browser PC client of Guangdong One One Five Technology Co. 115 PC client has a dll hijacking vulnerability, which can be exploited by an attacker to execute arbitrary code...

DLL Hijacking Vulnerability in 263 Cloud Communications PC Client Software

263 cloud communication is the first enterprise instant messaging tool based on intelligent mobile terminals, from pc client to mobile terminal extension, to meet the needs of users at any time with the news. 263 cloud communication pc client software DLL hijacking vulnerability, the attacker can...