GBase 8s database suffers from a local boost vulnerability (CNVD-2020-70785)

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database has a local privilege vulnerability, which can be exploited by an attacker to gain control of the server...

gbase 8s database suffers from a local lift vulnerability (CNVD-2020-68762)

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database suffers from a local power lifting vulnerability, which can be exploited by an attacker to gain control of the server...

Micro Focus ArcSight Logger Cross-Site Scripting Vulnerability (CNVD-2020-66857)

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site scripting vulnerability exists in Micro Focus...

Unauthorized Access Vulnerability in the Website Building System of Beijing Jinfang Times Technology Co.

Beijing Jinfang Times Technology Co., Ltd. is a company that provides website construction services for enterprises, institutions and government agencies. An unauthorized access vulnerability exists in the website building system of Beijing Jinfang Times Technology Co. An attacker can exploit the...

Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2020-65154)

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. No detailed vulnerability detail...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-68042)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-68048)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-68035)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

File Upload Vulnerability in easySite Content Management System

CSCL is a provider of artificial intelligence technology and informatization software and platforms. A file upload vulnerability exists in easySite Content Management System, which can be exploited by attackers to gain control of the server...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-68050)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Apple macOS Mojave input validation error vulnerability (CNVD-2020-65930)

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers. Apple macOS Mojave has a security vulnerability that can be exploited by attackers to bypass sandboxing restrictions...

Adobe Acrobat and eader Improper Access Control Vulnerability

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. An improper access control vulnerability exists in Adobe Acrobat and Reader. An attacker can exploit this vulnerability to achieve local elevation of...

Apple macOS Catalina Competitive Conditions Issue Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.5, which originates from an application that can execute arbitrary code using kernel privileges. No details of the...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-65215)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Stored Cross-site Scripting Vulnerability in Pollution Source Online Monitoring System of Beijing Wanwei Yingchuang Technology Development Co.

Beijing Wanwei Yingchuang Technology Development Co., Ltd. is committed to the research, development and application of products and technologies in the field of environmental protection Internet of Things. A stored cross-site scripting vulnerability exists in the online pollution source monitori...

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59411)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...

Akamai and Snyk Partnership Creates a Powerful Combination for In-Browser Script Protection

A web experience begins with the sum of the code you created. But it also includes all the code the user is put in contact with when loading your website. This means the attack surface to monitor for web application software threats is not just your code repositories, but the sum of the assets re...

Information leakage vulnerability in CSC-850 of Beijing Sifang Relay Automation Co., Ltd (CNVD-2020-58374)

The CSC850 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. An information disclosure vulnerability exists in the CSC-850 of Beijing Sifang Relay Automation Company Limited, which can be...

Memory corruption vulnerability exists in INFRAWARE POLARIS OFFICE (CNVD-2020-58336)

POLARIS OFFICE is a mobile office software developed for mobile terminals by the Korean company INFRAWARE. A memory corruption vulnerability exists in INFRAWARE POLARIS OFFICE, which can be exploited by attackers to cause a denial of service attack...

Binary Vulnerability in Advantech WebAccess HMI PanelSim.exe

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A binary vulnerability exists in Advantech WebAccess HMI PanelSim.exe, which can be exploited by attackers to cause a denial of service on the server...