Mozilla Thunderbird Denial of Service Vulnerability (CNVD-2021-28299)

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A denial of service vulnerability exists in Mozilla Thunderbird, which can be exploited b...

Denial of Service Vulnerability in MikroTik CHR Routers

Founded in 1995 and headquartered in Riga, Latvia, MikroTik is engaged in the development of routers and wireless ISP systems. A denial of service vulnerability exists in the MikroTik CHR router, which can be exploited by an attacker to cause the program to crash...

Weak password vulnerability in TP-LINK TL-WR840N (CNVD-2021-30196)

The TL-WR840N is a wireless router. A weak password vulnerability exists in the TP-LINK TL-WR840N, which can be exploited by an attacker to obtain sensitive information...

Remote Command Execution Vulnerability in E-Mail Email System

YZP is a professional mail system software and total solution provider. The remote command execution vulnerability in the YZP email system can be exploited by an attacker to achieve remote command execution without authorization and gain access to the target server...

Adobe After Effects has a stack overflow vulnerability

Adobe After Effects, abbreviated as "AE", is a graphic video processing software from Adobe, suitable for organizations engaged in design and video stunts, including television stations, animation production companies, individual post-production studios and multimedia studios. A stack overflow...

Unauthorized Access Vulnerability in Youku Routerbot

Youku Routerbot is a smart router. Unauthorized access vulnerability exists in Youku Routerbao, which can be exploited by attackers to obtain sensitive information...

Cisco Umbrella Injection Vulnerability (CNVD-2021-45274)

Cisco Umbrella is a cloud security platform that provides a first line of defense against Internet threats. A link injection vulnerability exists in the Scheduled Reports feature of Cisco Umbrella. The vulnerability stems from improper neutralization of user-supplied input. An attacker could...

Denial of Service Vulnerability in Multiple Huawei CloudEngine Products

Huawei CloudEngine 12800 and others are products of Huawei, China.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei Cloudengine 5800 is a 5800 series data center switch.Huawei Cloudengine 6800 is a 6800 series data center switch. Denial of service vulnerability in multiple Huaw...

Memory leak vulnerability in multiple Huawei products (CNVD-2021-25948)

Huawei IPS Module and others are products of Huawei, China.Huawei IPS Module is an Intrusion Prevention System IPS module.NGFW Module is a Next-Generation Firewall NGFW module.Secospace USG6600 is a Next-Generation Firewall product. A memory leak vulnerability exists in multiple Huawei products...

Redmine Cross-Site Scripting Vulnerability (CNVD-2021-27366)

Redmine is an open source, web-based project management and defect tracking tool. A stored cross-site scripting vulnerability exists in Redmine. An attacker can exploit this vulnerability via textile inline links to conduct cross-site scripting attacks...

Watch Out! Mission Critical SAP Applications Are Under Active Attack

Cyber attackers are actively setting their sights on unsecured SAP applications in an attempt to steal information and sabotage critical processes, according to new research. "Observed exploitation could lead in many cases to full control of the unsecured SAP application, bypassing common securit...

Weak password vulnerability in HUAWEI Secoway USG5120

Founded in 1987, Huawei is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in the HUAWEI Secoway USG5120. An attacker can exploit the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Huaxia ERP (CNVD-2021-28480)

Huaxia ERP based on SpringBoot framework and SaaS model , to provide open source ERP software for small and medium-sized enterprises , currently focusing on sales and marketing inventory + financial + production functions . Huaxia ERP has a SQL injection vulnerability, which can be exploited by...

UFIDA U8 OA Collaboration Management Software has an arbitrary file download vulnerability

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in UFIDA U8 OA Collaboration Management Software. An attacker can exploit this vulnerability to downlo...

Denial of Service Vulnerability in Adobe After Effects (CNVD-2021-28386)

Adobe After Effects is a suite of visual effects and motion graphics production software. The software is mainly used for 2D and 3D compositing, animation and visual effects production. A denial of service vulnerability exists in Adobe After Effects. An attacker could exploit this vulnerability t...

Unauthorized Access Vulnerability in Flash Flood Monitoring and Early Warning System of Chengdu Wanjiang Gangli Technology Co.

Founded in 2007, Chengdu Wanjiang Gangli Technology Co., Ltd. is positioned as a full chain service provider of water technology under the framework of artificial intelligence. An unauthorized access vulnerability exists in the flash flood monitoring and early warning system of Chengdu Wanjiang...

Denial of Service Vulnerability in Adobe After Effects

Adobe is an American multinational computer software company headquartered in San Jose, California. It is mainly engaged in the development of multimedia production software, but in recent years it has also begun to engage in the development of rich Internet applications, marketing applications,...

Devolutions Remote Desktop Manager Cross-Site Scripting Vulnerability (CNVD-2021-26214)

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in the Administration Report in Devolutions Remote Desktop Manager...

Google Chrome Out-of-Bounds Read Vulnerability (CNVD-2021-28283)

Chrome is a simple and efficiently designed web browsing tool developed by Google. An out-of-bounds read vulnerability exists in IPC in versions prior to Google Chrome 89.0.4389.114. An attacker can exploit this vulnerability to obtain sensitive information...

Accusoft ImageGear out-of-bounds write vulnerability (CNVD-2021-25373)

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the SGI format buffer size handling feature of Accusoft ImageGear 19.8. An attacker can exploit the vulnerability by supplying a specially crafted malicious fi...