116 matches found
CVE-2021-0370
In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...
Command Execution Vulnerability in Tongda OA (CNVD-2021-23368)
Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...
Janus Signature Vulnerability in QQ Extreme Edition for Android
QQ Extreme is a chatting and socializing app. A Janus signature vulnerability exists in QQ Extreme Edition for Android. An attacker can exploit the vulnerability to gain server privileges...
File Containment Vulnerability in EaseUS Web Authentication System
EaseUS Web Authentication System is a user management system structured in PHP+Mysql. A file inclusion vulnerability exists in EaseUS Web Authentication System. An attacker can exploit this vulnerability to gain server privileges...
CVE-2021-20658
SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...
Design/Logic Flaw
SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...
CVE-2021-20658
SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...
Multiple Intel® Server Elevation of Privilege Vulnerabilities
Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Multiple Intel® Server elevation of privilege vulnerability can be exploited by an attacker to escalate privileges via local access...
File upload vulnerability in Waychar enrollment system (CNVD-2021-10502)
Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. A file upload vulnerability exists in the Waychar registration system, which can be exploited by an attacker to upload a webshell and gain server privileges...
Apache Druid 0.20.0 Remote Command Execution
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests; however, that feature is disabled by default. In Druid versions prior to 0.20.1, an authenticated user can send a specially-crafted request that both enables the JavaScript...
Niushop community group buy suffers from a file upload vulnerability
Niushop Community Group Buying is a group buying system that allows you to quickly set up a community group buying/community program and quickly launch your online and offline business. A file upload vulnerability exists in Niushop Community Group Buying, which can be exploited by an attacker to...
File Upload Vulnerability in Nanjing Guanbang Network Technology Co.
Nanjing Guanbang Network Technology Co., Ltd. was founded in September 2004, is a private software enterprise through the Jiangsu Provincial Information Industry Department of double-soft recognition. It is mainly engaged in the research and development and sales of education and teaching softwar...
Command Execution Vulnerability in Wave ClusterEngine
Wave ClusterEngine is a cluster management software developed by Wave. A command execution vulnerability exists in Wave ClusterEngine. An attacker can exploit this vulnerability to gain server privileges...
File Upload Vulnerability in BenQ Order Management Platform of Chongqing BenQ Software Co.
Chongqing BenYi Software Co., Ltd. is an authorized marketing service organization under Kingdee International Software Group. It is mainly engaged in sales, implementation and after-sales service of Kingdee software. There is a file upload vulnerability in the order management platform of...
CVE-2020-12148
A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM ECOS appliance software could allow an attacker to execute arbitrary commands with the privileges of the web server running on the EdgeConnect appliance. An attacker could exploit this vulnerability to establish a...
Netrend World Intelligence (Intelligence) File Upload Vulnerability in Intelligent Tire Monitoring Management System of Netrend World (Beijing) Intelligent Technology Co.
Ltd. is a technology-based enterprise focusing on the Internet of Things IoT for commercial vehicle tires, the first smart tire co-development unit in China, with a number of invention patents and software copyrights, and has obtained the CE of the European Union and the FCC certification of Nort...
Command execution vulnerability exists in UCMS (CNVD-2020-71677)
UCMS is a simple open source content management system. UCMS suffers from a command execution vulnerability that can be exploited by attackers to gain server privileges...
File Upload Vulnerability in Fishy CMS Backend Data Backup Branch
FishLeap CMS is a content management system specifically geared towards enterprise applications. A file upload vulnerability exists in the backend data backup of Fishy CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
File upload vulnerability in MCMS frontend up***.do page
MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS frontend up.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...