Information Disclosure Vulnerability in 3G/4G Router

3G/4G Router is a router device of Shenzhen Hongdian Technology Co. The 3G/4G Router suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Canal Admin suffers from an information disclosure vulnerability

Canal Admin is designed to provide overall configuration management, node O&M and other O&M-oriented functions for canal, providing a relatively friendly WebUI interface. There is an information disclosure vulnerability in Canal Admin, which can be exploited by attackers to obtain sensitive...

Shenzhen Jixiang Tengda Technology Co., Ltd. unauthorized access vulnerability in Tengda wireless routers

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd Tengda wireless router has an unauthorized access vulnerability, which can be exploited b...

Unauthorized Access Vulnerability in Extreme ERS3500

Extreme, business scope: research, development and production of advanced voice and data communication network system products, system integration; technical consulting, technical services and technical training for self-produced products, etc. Extreme ERS3500 suffers from an unauthorized access...

Unauthorized Access Vulnerability in AXIS 214 PTZ Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS 214 PTZ Network Camera, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in EDIMAX Wireless wireless routers

EDIMAX Wireless is a 2.4G and 5G dual-band wireless router from XUNZHOU Technology Co. A weak password vulnerability exists in EDIMAX Wireless Wireless Router, which can be exploited by attackers to obtain sensitive information...

Google Android System Remote Code Execution Vulnerability (CNVD-2021-43417)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11. An attacker can exploit this vulnerability to...

DjVu has a denial of service vulnerability

DjVu an image compression technique that has evolved into one of the standard image document formats. A denial of service vulnerability exists in DjVu, which can be exploited by an attacker to cause a denial of service...

Arbitrary File Download Vulnerability in Dahua In-vehicle Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2021-35888)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...

IBM QRadar SIEM Hardcoded Credentials Vulnerability (CNVD-2021-36081)

QRadar SIEM is an IBM enterprise security information and event management product that consolidates log event and network flow data from thousands of devices, endpoints and applications scattered across the network. A hard-coded credentials vulnerability exists in IBM QRadar SIEM versions 7.3 an...

Arbitrary File Download Vulnerability in Dahua In-vehicle Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2021-35881)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...

Mikrotik RouterOs Memory Corruption Vulnerability (CNVD-2021-49785)

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /nova/bin/traceroute process. A remote attacker cou...

Memory Corruption Vulnerability in AlarmWebEx.ocx Control of CenturyStar Configuration Software

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Command Execution Vulnerability in Youyou Firewall Gateway Management System (CNVD-2021-36254)

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

Denial of Service Vulnerability in CenturyStar Configuration Software

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Denial of Service Vulnerability in CenturyStar Configuration Software (CNVD-2021-35747)

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Denial of Service Vulnerability in CenturyStar Configuration Software (CNVD-2021-35742)

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Intelligent Transportation Terminal Management Equipment of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a logic flaw vulnerability in the intelligent transportation terminal management equipment of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers t...

Unauthorized Access Vulnerability in SeaweedFS Filer

SeaweedFS is a scalable distributed file system. An unauthorized access vulnerability exists in SeaweedFS Filer. An attacker could exploit the vulnerability to obtain sensitive information...

Piwigo suffers from a SQL injection vulnerability

Piwigo is a web-based photo album software from the Piwigo team. Piwigo suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...