Autodesk FBX Review Null Pointer Dereference Vulnerability

Autodesk FBX Review is a lightweight standalone tool for viewing 3D assets and animations. A null pointer dereference vulnerability exists in Autodesk FBX Review version 1.4.1.0. An attacker can exploit this vulnerability by tricking a user into opening a malicious FBX file, causing the applicati...

Logic Flaw Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.

Ltd. is a high-tech enterprise integrating product research and development, application integration and customer service, with the main goal of providing high-quality application software system design, integration and maintenance services for users in the library industry. There is a logic flaw...

Unauthorized Access Vulnerability in Panasonic-SF335 Camera

Matsushita Electric China Co., Ltd. is an electronics manufacturer that engages in business activities such as the production and sale of various electrical products. An unauthorized access vulnerability exists in the Panasonic-SF335 camera. An attacker can exploit the vulnerability to obtain...

HPE Superdome Flex server Denial of Service Vulnerability

HPE Superdome Flex Server is a modular server product from Hewlett Packard Enterprise hpe. A denial of service vulnerability exists in versions prior to HPE Superdome Flex server 3.30.142, which can be exploited by an attacker to cause connections to the BMC web interface to hang...

Denial of Service Vulnerability in Fast Cat App

Fast Cat App is a short video app. A denial of service vulnerability exists in Fast Cat APP. An attacker can exploit the vulnerability to cause the program to crash...

Google Chrome QR scanner security bypass vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 90.0.4430.72 in the "QR scanner". An attacker can exploit this vulnerability to bypass security restrictions...

SAP NetWeaver Application Server for Java Information Disclosure Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Application Server for Java versions 7.30, 7.31,...

Denial of Service Vulnerability in Suncom Cloud QTouch Configuration Software General Edition (CNVD-2021-30059)

QTouch configuration software is a professional cross-platform automation software launched by Wuhan SunTone Intelligent Technology Co. A denial of service vulnerability exists in the general version of SunTouch Cloud QTouch Configuration Software. An attacker can exploit this vulnerability to...

Jason Summers deark null pointer dereference vulnerability

Jason Summers deark is a Jason Summers open source application. A command line utility that can decode certain types of files. A null pointer dereference vulnerability exists in the dbufwrite function in src/deark-dbuf.c in versions of Jason Summers deark prior to 1.5.8, which can be exploited by...

MDaemon Webmail IFRAME Injection Vulnerability

MDaemon Webmail is a server-side application for providing mail services from MDaemon, Inc. in the United States. An IFRAME injection vulnerability exists in MDaemon Webmail versions prior to 20.0.4, which can be exploited by an attacker to perform any action with the privileges of the attacked...

Denial of Service Vulnerability in Lovecraft Windows Client

Aikiye is an online video website founded on April 22, 2010 by Gong Yu. A denial-of-service vulnerability exists in the AikiYi Windows client, which can be exploited by attackers to cause a denial-of-service attack...

The vulnerability of the SeaMonkey web browser software lies in the lack of protection for sensitive data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the SeaMonkey web browser lies in the lack of protection for sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Google Chrome Remote Code Execution Vulnerability (CNVD-2021-27989)

Google Chrome is a web browser from Google, an American company. Google Chrome remote code execution vulnerability can be exploited by an attacker to construct a specially crafted page, which can be accessed by a user resulting in remote code execution...

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-29061)

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited by an attacker to achieve remote code execution...

LibRaw suffers from a stack overflow vulnerability

LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG, and others format images, supporting various operating systems. LibRaw suffers from a stack overflow vulnerability that can be exploited to gain control of the server...

Weak Password Vulnerability in WR1045ND of P&L Technologies Ltd.

"TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in TP-LINK WR1045ND, which can be exploited by attackers to log in to the system backend and obtain sensitive information...

Command Execution Vulnerability in Wave ClusterEngine (CNVD-2021-30110)

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. A command execution vulnerability exists in Wave ClusterEngine, which can be exploited by an attacker to gain server control privileges...

Patreon WordPress Cross-Site Scripting Vulnerability (CNVD-2021-28760)

Patreon is a subscription-based crowdfunding platform and Patreon WordPress is a WordPress plugin for the platform. A cross-site scripting vulnerability exists in Patreon WordPress versions prior to 1.7.2. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via the...

TnCMS suffers from a file upload vulnerability (CNVD-2021-30353)

TnCMS is a light content management system based on ThinkPHP6+layUI based development. TnCMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of the server...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2021-29553)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to trigger a fatal error, thereby...