SQL Injection Vulnerability in Kingsoft Terminal Security System V9.0

Terminal Security System V9.0 is a terminal security management platform specially designed for the government, military industry, energy, education, medical care and grouped enterprises. Kingsoft Terminal Security System V9.0 suffers from SQL injection vulnerability, which can be exploited by...

Denial of Service Vulnerability in the Car Book App

The Car Book app is an automotive information app. Automobile Daquan app has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-01304)

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. WPS Office Professional Edition has a memory corruption vulnerability that can be exploited by attacker...

Local Elevation of Privilege Vulnerability in System Explorer v7.0.0

System Explorer is a free system resource management tool. A local elevation of privilege vulnerability exists in System Explorer v7.0.0, which can be exploited by an attacker to gain control of a server...

Ship 100 online education system has an arbitrary file download vulnerability

Shipping 100 is a virtual goods automatic shipping system / article pay to read system, without human guards, customers can buy online to automatically complete the transaction. There is an arbitrary file download vulnerability in the Shipment 100 online education system. An attacker can exploit...

The vulnerability of the Chakra scenario mechanism in Microsoft Edge browsers allows a perpetrator to gain access to protected information.

The vulnerability of the Chakra scenario mechanism in Microsoft Edge browsers is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

Unauthorized Access Vulnerability in Panavision e-office

Panmicro e-office system is the standard, easy to use, rapid deployment of on-line professional collaborative OA software. An unauthorized access vulnerability exists in Panmicro e-office, which can be exploited by an attacker to log in to the backend and perform unauthorized operations...

infinite loop when cleaning up IRQ vectors

ISSUE DESCRIPTION When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checked, the checking CPU m...

Arbitrary File Read Vulnerability in Chemical Virtual Simulation Laboratory of Beijing Obier Software Technology Development Co.

Ltd. is a high-tech enterprise focusing on the development and promotion of computer simulation technology, virtual reality technology, network technology, mainly dedicated to providing virtual simulation software, network platform and supporting hardware equipment development and technical...

Bloodx CMS has a flawed logic vulnerability

BloodX CMS is a cms. Bloodx CMS suffers from a logic flaw vulnerability that can be exploited by an attacker to obtain sensitive system information...

Denial of Service Vulnerability in INHECO On Deck Thermal Cycler 8100100

On Deck Thermal Cycler 8100100 is a temperature controller from INHECO, Germany, that supports Ethernet communication. A denial of service vulnerability exists in the INHECO On Deck Thermal Cycler 8100100, which can be exploited by attackers to launch denial of service attacks...

Apache Traffic Server Sensitive Information Disclosure Vulnerability

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. A security vulnerability exists in Apache Traffic Server, which can be exploited by an attacker to bypass access restrictions to data via the server's negative cache poisoning ...

CVE-2020-29597

creationtimestamp| type| source ---|---|--- 2020-12-07 22:30:17+00:00| seen| https://t.me/cibsecurity/17206 2024-12-17 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-17 2025-01-21 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

ImageMagick has an unspecified vulnerability (CNVD-2021-10256)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A security vulnerability exists in ImageMagick.h in versions of ImageMagick prior to 7.0.9-0 in which MagickCore/quantum.h has a range of representable values outside th...

GNU C Library Assertion Failure Vulnerability

The GNU C Library glibc is an open-source, free, easy-to-download C compiler released under the LGPL license. An assertion failure vulnerability exists in the iconv function in GNU C Library versions 2.30 through 2.32. An attacker can exploit this vulnerability to cause a denial of service via UC...

ImageMagick integer overflow vulnerability (CNVD-2021-10261)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An integer overflow vulnerability exists in MagickCore/statistic.c in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting ...

Denial of Service Vulnerability in the MP3009 Processor of the Schneider Tricon Safety Instrumented System (CNVD-2020-70793)

The Tricon Safety Instrumented System is a safety instrumented system from Schneider Electric Co. The MP3009 module is the processor module for the Schneider Tricon Safety Instrumented System. A denial of service vulnerability exists in the MP3009 processor of the Schneider Tricon Safety...

CVE-2020-13497

An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in String Type Index. This vulnerability could be used to bypass mitigations and aid further exploitatio...

ACS SpiiPlusEC-08 suffers from a denial of service vulnerability (CNVD-2020-70574)

ACS Motion Control is an Israel-based, OEM-oriented supplier of motion controllers and drive solutions for a wide range of high-tech systems in semiconductor manufacturing, laser processing, additive manufacturing, flat panel display manufacturing, electronics assembly, life sciences, and more. A...

McAfee Total Protection Elevation of Privilege Vulnerability

McAfee Total Protection is a one-stop security suite. An elevation of privilege vulnerability exists in McAfee Total Protection versions prior to 16.0.29. An attacker can exploit the elevation of privilege vulnerability by creating a junction link to manipulate a folder...