11805 matches found
PT-2024-17557 · Guizhou Xiaoma Technology · Jpress
Name of the Vulnerable Software and Affected Versions: Guizhou Xiaoma Technology jpress version 5.1.2 Description: A problem was found in the Attachment Upload Handler's function AttachmentUtils.isUnSafe of the file /commons/attachment/upload. The manipulation of the argument files leads to cross...
WAVLINK WN531P3 Hardcoded Vulnerability
WAVLINK WN531P3 is a router developed by China RuiYin Technology WAVLINK. The WAVLINK WN531P3 suffers from a hard-coded vulnerability that can be exploited by an attacker to submit a special request to access the system as root...
CVE-2024-12347 Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorization
A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some unknown processing of the file /jeewmswar/webpage/system/druid/index.html of the component Druid Monitoring Interface. The manipulation leads to improper...
SQL Injection Vulnerability in UFIDA NC of UFIDA Network Technology Co. Ltd (CNVD-C-2024-947797)
UFIDA NC is a large erp enterprise management system and e-commerce platform. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...
CVE-2024-52558 Planet Technology Planet WGS-804HPT Integer Underflow
The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program...
CVE-2024-52558 Planet Technology Planet WGS-804HPT Integer Underflow
The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program...
CVE-2024-52320 Planet Technology Planet WGS-804HPT Command Injection
The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution...
CVE-2024-52320 Planet Technology Planet WGS-804HPT Command Injection
The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution...
CVE-2024-48871 Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow
The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution...
CVE-2024-48871 Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow
The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution...
Unauthorized Access Vulnerability in the Development Center of Beijing Asian Control Technology Development Co.
The development center introduces the concept of full configuration into the construction of intelligent manufacturing production control system, aiming at solving the problems of long development cycle, high cost and high threshold of the intelligent manufacturing MES system in the traditional...
XSS Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.
StarRocks database system is a new generation of open source extremely fast full-scene MPP database system . Beijing Mirror Boat Technology Co. StarRocks database system has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...
XSS Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.
StarRocks database system is a new generation of open source extremely fast full-scene MPP database system . Beijing Mirror Boat Technology Co., Ltd StarRocks database system has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...
File upload vulnerability in the education cloud platform of Beijing Zhongqing Modern Technology Co. Ltd (CNVD-C-2024-945982)
Beijing Zhongqing Modern Technology Co., Ltd. is a high-tech enterprise founded in 1993, specializing in providing educational users with products and solutions such as recording and broadcasting system, three classrooms and smart classrooms. A file upload vulnerability exists in the education...
File upload vulnerability in the education cloud platform of Beijing Zhongqing Modern Technology Co. Ltd (CNVD-C-2024-945978)
Beijing Zhongqing Modern Technology Co., Ltd. is a high-tech enterprise founded in 1993, specializing in providing educational users with products and solutions such as recording and broadcasting system, three classrooms and smart classrooms. A file upload vulnerability exists in the education...
Arbitrary File Read Vulnerability in Education Cloud Platform of Beijing Zhongqing Modern Technology Co.
Beijing Zhongqing Modern Technology Co., Ltd. is a high-tech enterprise founded in 1993, specializing in providing educational users with products and solutions such as recording and broadcasting system, three classrooms and smart classrooms. There is an arbitrary file reading vulnerability in th...
File Upload Vulnerability in Education Cloud Platform of Beijing Zhongqing Modern Technology Co.
Beijing Zhongqing Modern Technology Co., Ltd. is a high-tech enterprise founded in 1993, specializing in providing educational users with products and solutions such as recording and broadcasting system, three classrooms and smart classrooms. A file upload vulnerability exists in the education...
QNAP Systems License Center 安全漏洞
QNAP Systems License Center is a tool for monitoring and managing the licenses of applications running on local devices from China's Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems License Center version 1.9.43 and prior versions that stems from the inclusion of a...
Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition
Summary This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their October 2024 Critical Patch Update, plus CVE-2024-10917. For more information please refer to Oracle's October 2024 CPU Advisory and the X-Force database entries...
