LCDS LAquis SCADA Information Disclosure Vulnerability (CNVD-2020-25541)

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. An information disclosure vulnerability exists in LCDS LAquis SCADA version...

Operating System Command Injection Vulnerability in Multiple NETGEAR Products

NETGEAR R6700 and others are products of NETGEAR, Inc.NETGEAR R6700 is a wireless router.NETGEAR D7800 is a wireless modem.NETGEAR R6900 is a wireless router.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless modem.NETGEAR R6900 is a wireless router...

Command Injection Vulnerability in Multiple NETGEAR Products (CNVD-2021-50928)

NETGEAR EX7000 and others are products of NETGEAR Corporation.NETGEAR EX7000 is a wireless network signal extender.NETGEAR R8500 is a wireless router.NETGEAR D6400 is a wireless modem.NETGEAR R8500 is a wireless router.NETGEAR R8500 is a wireless router.NETGEAR R8500 is a wireless router.NETGEAR...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-50924)

The NETGEAR WAC505 and others are a wireless access point AP from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in a...

Universal Password Bypass Vulnerability in Driving School Management System V5.0 of Beijing 1039 Technology Development Co.

Beijing 1039 Technology Development Co., Ltd. is a focus on driving school management system, driving school mobile office system, driving school management software, driving school enrollment program development, etc., for the driving school to provide a dead-end driving school management system...

Buffer overflow

A buffer overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitrary code execution on a system running it...

CVE-2020-7081

A type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitary code read/write on the system running it...

IBM QRadar SIEM Access Control Error Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An access control...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS. The vulnerability exists as a deadlock flaw was found in the Linux kernel splice implementation. This deadlock could occur during interactions between the genericfilesplicewrite and splicefrompipe functions, possibly leading to a partial denial of...

Unauthorized Access Vulnerability in Website Building System of Qinhuangdao Shangjing Technology Co. Ltd (CNVD-2020-24435)

Qinhuangdao Shangjing Technology Co., Ltd. is a high-tech enterprise. Qinhuangdao Shangjing Technology Co., Ltd. building system has an unauthorized access vulnerability, which can be exploited by an attacker to view and change the administrator's password access...

SQL Injection Vulnerability in Easy B2C Mall System V1.1 pr***.php Page

Easy B2C mall system is a mall system based on open source framework development. Easy B2C Mall System V1.1 pr.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Google Android System Out-of-Bounds Write Vulnerability (CNVD-2020-24774)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in the System component of Android. The vulnerability can be exploited by an attacker to execute code...

Easy B2C Mall System V1.1 Exists Arbitrary File Deletion Vulnerability

Easy B2C mall system is a mall system based on open source framework development. Easy B2C Mall System V1.1 exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete any directory...

Arbitrary Code Execution

dovecot is vulnerable to arbitrary code execution. A buffer overflow vulnerability in the indexer-worker process allows an attacker to execute arbitary code on the system...

CVE-2019-19606

X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths or a leak of OS credentials to a remote system via crafted network packets. This could be used to execute arbitrary commands on the system...

Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal Exploit

Exploit for java platform in category web applications Exploit Title: Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal Exploit Author: hongphukt Vendor Homepage: https://www.jinfonet.com/ Software Link: https://www.jinfonet.com/product/download-jreport/ Version: JReport 15.6 Tested on...

Osmand Code Issue Vulnerability

Osmand is a mapping and navigation application for mobile platforms. A code issue vulnerability exists in Osmand 2.0.0 and prior versions. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. No detailed vulnerability detai...

Positive Academic Affairs system has information leakage vulnerability

Ltd. is a software enterprise and high-tech enterprise specializing in consulting, planning, construction and service in the field of university education informatization. There is an information leakage vulnerability in the Zhengfang Academic Affairs System, which can be exploited by attackers t...

Shanghai Danfan Network Technology Co., Ltd. builds website system with SQL injection vulnerability (CNVD-2020-26554)

Shanghai Danfan Network Technology Co., Ltd. is for the chemical industry to provide B2B e-commerce platform of professional website. Shanghai Danfan network science and technology limited company builds the station system exists the SQL injection loophole, the attacker may utilize the loophole...

The vulnerability of the Linux operating system, related to insecure management of privileges, allows a perpetrator to execute arbitrary code.

The vulnerability of the Linux operating system is related to insecure management of privileges. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...