There is a logic design flaw in the Kaiyen Gold app

Kaiyan Gold Service app is a financial management software. There is a logical design vulnerability in the Kaiyan Gold Service app. The vulnerability is due to the registration of not doing any verification restrictions, the attacker through the packet bursting and intercept the return of the...

Axesstel MU553S Default Password Vulnerability

The Axesstel MU553S is a router from Axesstel USA. A security vulnerability exists in the Axesstel MU553S MU55XS-V1.14 version that originates from the use of the default 'admin' password for the administrator account. An attacker can exploit the vulnerability to perform unauthorized operations...

DENX Software Engineering Das U-Boot Security Bypass Vulnerability

DENX Software Engineering Das U-Boot is a set of bootloaders from DENX Software Engineering, Germany, that can read device configurations from AES encrypted files. A security vulnerability exists in DENX Software Engineering Das U-Boot. An attacker could exploit the vulnerability to perform...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-28648)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the web browsers that comes with the system. Edge in Microsoft Windows suffers from a...

Drupal Views Refresh Refresh Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An access bypass vulnerability exists in the Drupal Views Refresh Refresh module. This allows an attacker to bypass certain security restrictions and perform unauthorized...

Drupal Views Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An access bypass vulnerability exists in the Drupal Views module. The vulnerability allows attackers to bypass certain security restrictions and perform unauthorized...

SeaWell Networks Spectrum SDC Trust Management Vulnerability

SeaWell Networks Spectrum SDC is a video solution. The solution utilizes ABR repackaging technology to simplify IP video delivery using a common format. A security vulnerability exists in SeaWell Networks Spectrum SDC version 02.05.00. The vulnerability stems from the program's use of default wea...

NetApp Data ONTAP Authentication Bypass Vulnerability

NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. An authentication bypass vulnerability exists in NetApp Data ONTAP versions...

SimpleSAMLphp Security Bypass Vulnerability (CNVD-2017-24382)

SimpleSAMLphp is a PHP authentication application that implements the SAML2.0 service provider and identity provider functionality . A security bypass vulnerability exists in SimpleSAMLphp 1.14.x through 1.14.11, which can be exploited by attackers to bypass security restrictions and perform...

Huawei FusionManager Cross-Site Request Forgery Vulnerability

Huawei FusionManager is a management software for hardware devices, virtualized resources, and applications from Huawei, China. A cross-site request forgery vulnerability exists in Huawei FusionManager versions V100R002C03 and V100R003C00. A remote attacker could exploit this vulnerability to...

Drupal Relation Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An access bypass vulnerability exists in the Drupal Relation module. An attacker could use the vulnerability to bypass certain security restrictions and perform unauthoriz...

OpenSSL Security Bypass Vulnerability (CNVD-2017-30659)

OpenSSL is an open source capable of implementing the Secure Sockets Layer and Secure Transport Layer protocols for a common cryptographic library. A security vulnerability exists in OpenSSL that allows a remote attacker to exploit the vulnerability to submit special requests, bypass security...

CloudBees Jenkins Periodic Backup Plugin Security Bypass Vulnerability

CloudBees Jenkins is a set of U.S. CloudBees continuous integration tools based on Java development , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Periodic Backup Plugin is one of the file regular backup...

Mozilla Firefox has an unspecified vulnerability (CNVD-2017-222715)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 55. A remote attacker could exploit the vulnerability to perform unauthorized operations...

Attic 'attic/archiver.py' security bypass vulnerability

Attic is a Python based data backup program that uses deduplication technology. A security bypass vulnerability exists in Attic. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26835)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. An input validation vulnerability exists in the handling of lost RTP packets in the...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26924)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the TrustZone syscall of the Qualcomm closed-source...

Google Android Qualcomm Group Unware Authorized Operation Vulnerability (CNVD-2017-26836)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in Android. The...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26834)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. An input validation vulnerability exists in the USIM response handling process of the...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26927)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in Android. The...