Remote code execution

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...

CVE-2020-28653

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...

PT-2021-11573

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine OpManager versions prior to 125203 Stable build and prior to 125233 Released build Description: The issue allows Remote Code Execution via the Smart Update Manager SUM servlet. This can be exploited for malicious purposes...

Qualcomm SnapDragon Smart Protect Buffer Error Vulnerability

Qualcomm SnapDragon Smart Protect is a Qualcomm component that provides real-time security for devices. The technology uses machine learning to analyze behavior and protect devices from vulnerabilities in real time. Qualcomm SnapDragon Smart Protect suffers from a security vulnerability that stem...

EulerOS 2.0 SP8 : opensc (EulerOS-SA-2021-1158)

According to the versions of the opensc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in scoberthurreadfile.CVE-2020-26570 - The...

Privacy predictions for 2021

2020 saw an unprecedented increase in the importance and value of digital services and infrastructure. From the rise of remote working and the global shift in consumer habits to huge profits booked by internet entertainers, we are witnessing how overwhelmingly important the connected infrastructu...

Warning Issued Over Hackable ADT's LifeShield Home Security Cameras

Newly discovered security vulnerabilities in ADT's Blue formerly LifeShield home security cameras could have been exploited to hijack both audio and video streams. The vulnerabilities tracked as CVE-2020-8101 were identified in the video doorbell camera by Bitdefender researchers in February 2020...

CVE-2020-36011

A cross-site scripting XSS issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field...

CVE-2020-36011

A cross-site scripting XSS issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field...

CVE-2020-26941

A local authenticated low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite deletion of any file via a symlink, due to insecure permissions. The possibility of exploiting this vulnerability is limited and can only take place during the installation...

CVE-2020-36011

A cross-site scripting XSS issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field...

Cross site scripting

A cross-site scripting XSS issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies field...

CVE-2020-36011

CVE-2020-36011 : XSS in Add Patient Form of QDOCS Smart Hospital Management System 3.1. A remote attacker can inject arbitrary code via Name, Guardian Name, Email, Address, Remarks, or Any Known Allergies fields. Documents confirm the affected product and the vulnerability type but do not provide...

QDOCS Smart Hospital Management System Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in QDOCS Smart Hospital Management System version 3.1. An attacker could exploit this vulnerability to steal sensitive information...

PT-2021-11906

Name of the Vulnerable Software and Affected Versions: QDOCS Smart Hospital Management System version 3.1 Description: A cross-site scripting XSS issue in the Add Patient Form allows a remote attacker to inject arbitrary code via the Name, Guardian Name, Email, Address, Remarks, or Any Known...

Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerability (CNVD-2021-09936)

Cisco Smart Software Manager Satellite is software designed to provide intelligent management of licenses. A command injection vulnerability exists in the WEB UI of Cisco Smart Software Manager Satellite 5.1.0 and prior versions. The vulnerability stems from the program not properly validating...

Denial of Service Vulnerability in Skyworth Home Gateway Smart Terminal DT741-csg (CNVD-2021-10397)

hereinafter referred to as "Skyworth Digital" is a national high-tech enterprise focusing on providing comprehensive and systematic digital home solutions and services for global users. A denial of service vulnerability exists in the Skyworth Home Gateway Smart Terminal DT741-csg, which can be...

Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerability (CNVD-2021-09934)

Cisco Smart Software Manager Satellite is software designed to provide intelligent management of licenses. A command injection vulnerability exists in the WEB UI of Cisco Smart Software Manager Satellite 5.1.0 and prior versions. The vulnerability stems from the program not properly validating...

Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerability (CNVD-2021-09933)

Cisco Smart Software Manager Satellite is software designed to provide intelligent management of licenses. A command injection vulnerability exists in the WEB UI of Cisco Smart Software Manager Satellite 5.1.0 and prior versions. The vulnerability stems from the program not properly validating...

Skyworth Home Gateway Smart Terminal DT521 suffers from Denial of Service Vulnerability (CNVD-2021-10400)

hereinafter referred to as "Skyworth Digital" is a national high-tech enterprise focusing on providing comprehensive and systematic digital home solutions and services for global users. A denial of service vulnerability exists in the Skyworth Home Gateway Smart Terminal DT521, which can be...