OpenClinic GA SQL Injection Vulnerability (CNVD-2021-34998)

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. An SQL injection vulnerability exists in the immoService parameter in listImmoLabels.jsp in OpenClinic GA version...

Unauthorized Access Vulnerability in Teach's WEB Exam System

After 13 years of accumulation and precipitation of education technology, Fuxin Teach's Beginning Technology Development Co., Ltd. focuses on the development of examination system software, and is one of the few professional examination system developers in China. There is an unauthorized access...

Google Android System elevation of privilege vulnerability (CNVD-2021-43413)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker to cause...

Weak password vulnerability in Belkin's WRT1900ACS

The WRT1900ACS is a Belkin router product. A weak password vulnerability exists in the Belkin WRT1900ACS, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

CVE-2021-31826

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Unix UOS Desktop Pro x86_64 suffers from a denial of service vulnerability (CNVD-2021-34252)

Unisys UOS Professional Edition is a computer operating system based on the domestic depth system deepin modification. A denial of service vulnerability exists in Unisys UOS Desktop Professional x8664. An attacker can exploit this vulnerability to cause the program to crash...

PT-2021-2858 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to a vulnerability in the web-based management interface of Cisco SD-WAN vManage Software. It is caused by insufficient file scope limiting,...

GHSA-3C67-GC48-983W Path Traversal in Ansible

An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file with...

CVE-2021-27096

NTFS Elevation of Privilege Vulnerability...

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to execute arbitrary commands on the underlying Linux operating system.

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to the implementation or modification of arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the Linux kernel with root privileges...

KODAK Lookout Converged Video System has Information Leakage Vulnerability

Ltd. is a leading provider of video and security products and solutions. An information leakage vulnerability exists in KODAK Lookout Converged Video System, which can be exploited by attackers to obtain sensitive information...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

Design/Logic Flaw

A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker would need to have valid user credentials at privilege level 15. This...

vscode-swiftlint code execution vulnerability

vscode-swiftlint is open source an unofficial VS Code extension . Swift styles and conventions can be implemented through SwiftLint . A code execution vulnerability exists in versions prior to vscode-swiftlint 1.4.5, which can be exploited by an attacker to execute arbitrary code on a system...

USN-4801-1 root-system vulnerability

It was discovered that ROOT incorrectly handled certain input arguments. An attacker could possibly use this issue to execute arbitrary code...

Microsoft Windows DNS 安全漏洞

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and together, DNS clients and DNS servers provide name resolution services for computers and users that map computer nam...

CVE-2021-22883

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unabl...

The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient input validation, allows attackers to re-record any files in the system.

The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to re-record any files in the system remotely...

Google Android 资源管理错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. An attacker can exploit this vulnerability to achieve...