Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2021-48891)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Luxion KeyShot Path Traversal Vulnerability

Luxion KeyShot is a software for designing photos of 3D scenes from Luxion USA. The software enables a real-time 3D rendering workflow that displays results immediately and reduces the time required to create photorealistic product photos. A path traversal vulnerability exists in the Luxion KeySh...

FiberHome HG6245D devices trust management issue vulnerability (CNVD-2021-18374)

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A trust management issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to attack vulnerable components using default passwords or hard-coded passwords,...

Aruba Networks AirWave Management Platform XML External Entity Injection Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An XML External Entity Injection XXE vulnerability exists in the web...

Extreme PDF Editor suffers from a memory corruption vulnerability (CNVD-2021-23476)

Extreme PDF Editor is a simple and good PDF editor. Extreme PDF Editor has a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Arbitrary File Download Vulnerability in Blue Ocean Premier Billing Management System

Chengdu Starry Blue Ocean Network Technology Co., Ltd. was registered on August 20, 2004 in Wuhou District Market and Quality Supervision Administration. Legal representative Zhang Yuliang, the company's scope of business includes sales: computers and accessories, electronic products, communicati...

Metasploit Wrap-Up

FortiOS Path Traversal Returning community contributor mekhalleh submitted a module targeting a path traversal vulnerability within the SSL VPN web portal in multiple versions of FortiOS. The flaw is leveraged to read the usernames and passwords of currently logged in users which are stored in...

Denial of Service Vulnerability in Fandango App

Fanduo app is a domestic real estate transaction service platform. There is a denial of service vulnerability in Fanduo app, which can be exploited by attackers to cause a denial of service...

IBM Engineering Requirements Quality Assistant Cross-Site Scripting Vulnerability (CNVD-2021-14752)

IBM Engineering Requirements Quality Assistant is a Watson AI based software from IBM USA used to assist developers in improving the quality of engineering requirements. A cross-site scripting vulnerability exists in IBM Engineering Requirements Quality Assistant. An attacker can exploit the...

JPress has a flawed logic vulnerability

JPress is a product developed using Java, similar to WordPress. JPress has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

Wuhan Douyu Fish Music Network Technology Co., Ltd Douyu Live Companion suffers from dll hijacking vulnerability (CNVD-2021-21511)

Douyu Live Companion is a live streaming software specially developed for the anchors of Douyu. Wuhan Douyu Fish Music Network Technology Co. Douyu Live Companion has a dll hijacking vulnerability, which can be exploited by attackers to execute malicious code and obtain server privileges...

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-14770)

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability to achieve remote code execution...

Dell EMC SourceOne Cross-Site Scripting Vulnerability

Dell EMC SourceOne is a powerful archiving solution for handling email, documents and data from disparate collaboration and messaging systems. A stored cross-site scripting vulnerability exists in Dell EMC SourceOne 7.2SP10 and earlier versions. A remote, low-privilege attacker could exploit this...

Information Disclosure Vulnerability in Omnicom's NATouch Touchscreen Configuration Software

hereinafter referred to as "Aotuo Technology", the company's independent intellectual property rights of the products covering programmable controllers, human-machine interfaces, configuration software and so on. An information leakage vulnerability exists in the NATouch touchscreen configuration...

Weilian Technology WiSCADA suffers from information leakage vulnerability

WiSCADA industrial configuration software is a 3D industrial configuration software product that supports Windows, Android and IOS cross-platform. An information disclosure vulnerability exists in Weilian Technology WiSCADA. An attacker can exploit the vulnerability to obtain sensitive informatio...

Memory corruption vulnerability exists in Nitro Pro (CNVD-2021-21842)

Nitro pro is a PDF production and management software. A memory corruption vulnerability exists in Nitro Pro. An attacker could exploit this vulnerability to cause the program to crash...

Beijing Tong APP suffers from unauthorized access vulnerability (CNVD-2021-21759)

Beijing Tong APP is a convenient service software for Beijing citizens. An unauthorized access vulnerability exists in Beijing Tong APP. An attacker can exploit this vulnerability to gain unauthorized access to user information...

Memory corruption vulnerability exists in Nitro Pro (CNVD-2021-21843)

Nitro pro is a PDF production and management software. A memory corruption vulnerability exists in Nitro Pro. An attacker could exploit this vulnerability to cause the program to crash...

Omni-channel customer service system of Foshan Beame Information Technology Co., Ltd. suffers from arbitrary file reading vulnerability

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an arbitrary file reading vulnerability in the omni-channel customer service system of Foshan Bemis Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2021-13208)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...