Atlassian Jira Information Disclosure Vulnerability (CNVD-2021-13207)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 cross-site scripting vulnerability (CNVD-2021-17235)

Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A cross-site scripting vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which arises from the failure of a network...

BIG-IP cross-site scripting vulnerability (CNVD-2021-13214)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in BIG-IP, which stems from the lack of proper validation of client-side data by t...

Buffer Overflow Vulnerability in EasyBuilder Pro

EasyBuilder Pro is a configuration software developed by Wyland. A buffer overflow vulnerability exists in EasyBuilder Pro. An attacker can exploit this vulnerability to cause the program to crash...

Owncloud Cross-Site Request Forgery Vulnerability

Owncloud ownCloud is a set of personal cloud storage solutions from the American company ownCloud Owncloud. A cross-site request forgery vulnerability exists in OwnCloud Core, which stems from a WEB application that does not adequately validate whether a request is coming from a trusted user, and...

FiberHome HG6245D devices authorization issue vulnerability

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. An authorization issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to access a telnet server...

SQL Injection Vulnerability in the Home Furnishing ERP Management System of Shanghai Furnishing Alliance Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. There is a SQL injection vulnerability in the Home Decoration ERP Management System of Shanghai Decoration Alliance Information Technology Co., Ltd, which can be exploited by attackers ...

Information Disclosure Vulnerability in MAS Mobile Proxy Server of China Mobile Communications Co.

MAS Mobile Proxy Server is an access tool to assist the original business systems of enterprises to realize wireless applications. An information leakage vulnerability exists in the MAS mobile proxy server of China Mobile Communications Corporation, which can be exploited by attackers to obtain...

Unauthorized Access Vulnerability in Streaming Media Management Server of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a provider of security products and industry solutions. There is an unauthorized access vulnerability in the streaming media management server of Hangzhou Hikvision Systems Technology Co. Ltd, which can be exploited by an attacker to obtain the...

Unauthorized Access Vulnerability in Seetong app of SkyVision Electronic Technology Co.

Seetong app is a video surveillance software. An unauthorized access vulnerability exists in Seetong app of SkyVision Electronic Technology Co. which can be exploited by attackers to obtain sensitive information...

IBM Security Verify Information Queue Information Disclosure Vulnerability (CNVD-2021-11360)

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. An information disclosure vulnerability exists in IBM Security Verify Information Queue. An attacker could exploit thi...

Unauthorized Access Vulnerability in ASRock DAYS Disaster Recovery Software (CNVD-2021-17379)

ASRock DAYS disaster recovery software belongs to DAYS series of optional products, which integrates disaster recovery, fault tolerance, backup and query functions, and provides one-stack infrastructure, the same disaster recovery management, elasticity, multi-layer data protection, smooth...

IBM Spectrum Protect Plus Denial of Service Vulnerability (CNVD-2021-12645)

IBM Spectrum Protect Plus is a data protection and availability solution for virtualized environments that can be deployed in minutes and protect your environment in less than an hour. A denial of service vulnerability exists in IBM Spectrum Protect Plus 10.1.0 - 10.1.7. A remote user can exploit...

IBM Security Verify Information Queue User Credentials Sent in Plaintext Vulnerability

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. IBM Security Verify Information Queue suffers from a user credentials plaintext delivery vulnerability. An attacker...

UFIDA Software Corporation UFIDA U8 Remote Existence Command Execution Vulnerability

UFIDA is an integrated, converged and ecological enterprise cloud service provider. A command execution vulnerability exists in UFIDA U8 Remote of UFIDA Software Corporation, which can be exploited by attackers to gain control of a server...

Denial of Service Vulnerability in Sensient Technologies Switch GW-9000-7548G

First established in 2013, Shenzhen Beijing Sense & Wink Technology Co. A denial of service vulnerability exists in GW-9000-7548G, which can be exploited by attackers to cause the device to crash...

Arbitrary File Read Vulnerability in RSR Router of Riptide Networks Co.

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. An arbitrary file read vulnerability exists in the RSR router of Ruijie Networks Corporation, which can be exploited by an attacker...

HcCMS suffers from SQL injection vulnerability (CNVD-2021-17282)

HcCms is a free website building system developed in php language. Developed using the widely popular PHP MYSQL. HcCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Intel® Graphics Drivers Multi-Generation Processor Denial of Service Vulnerability (CNVD-2021-10788)

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Intel® Graphics Drivers Multi-Generation Processor Denial of Service vulnerability can be exploited by attackers to cause a denial of service...

Multiple Intel® Server Elevation of Privilege Vulnerabilities

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Multiple Intel® Server elevation of privilege vulnerability can be exploited by an attacker to escalate privileges via local access...