Unicom Optical Cat wolink plug-in has information leakage vulnerability

The Unicom Optical Cat is a router. There is an information leakage vulnerability in the wolink plugin of CommuniLink Optical Cat, which is caused by the lack of authentication process of the plugin and can be exploited by attackers to obtain sensitive information...

Google Android libstagefright integer overflow vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in Android-11 version libstagefright. The vulnerability stems from an integer overflow. Allows an attacker to remotely code execute...

Rapid7 and Snyk Are on the Run(time) with Expanded SCA Capabilities

Earlier this year, Rapid7 and Snyk partnered together with the goal of securing cloud-native apps across the software development lifecycle SDLC. As modern development teams continue to adopt new technology that helps them accelerate their efforts, security teams are tasked with making sure they...

Palo Alto Networks PAN-OS Management Interface Command Injection Vulnerability

Palo Alto Networks PAN-OS is a set of operating systems developed for its firewall appliances. An OS command injection vulnerability exists in the Palo Alto Networks PAN-OS management interface that could be exploited by an attacker to execute arbitrary operating system commands...

Heap Overwrite Vulnerability (CNVD-2020-58855) exists in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing

Light Viewer is a professional image viewing software. A heap out-of-bounds write vulnerability exists in Shenzhen Xunlei.com Culture Co. An attacker can exploit this vulnerability to cause the software to crash...

File Upload Vulnerability in Mantis Chinese Enhanced Edition

Mantis is a lightweight open source defect tracking system based on PHP technology to provide project management and defect tracking services in the form of Web operations . A file upload vulnerability exists in the Chinese enhanced version of Mantis. An attacker can exploit the vulnerability to...

2020 CWE Top 25 Most Dangerous Software Weaknesses

The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2020 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesses list. The Top 25 uses data from the National Vulnerability...

Huawei P30 Denial of Service Vulnerability (CNVD-2020-52405)

Huawei P30 is a smartphone from Chinese company Huawei Huawei. A denial of service vulnerability exists in Huawei P30, which stems from incorrect resource management. An attacker can exploit this vulnerability for denial of service memory leak on the phone...

Intel Graphics Drivers Buffer Overflow Vulnerability (CNVD-2020-49546)

Intel Graphics Drivers is an integrated graphics driver from Intel USA. A security vulnerability exists in Intel Graphics Drivers versions prior to 15.45.31.5127 and prior to 15.40.45.5126. An attacker can exploit this vulnerability to elevate privileges...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2020-51778)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the Scripting Engine handles memory in Microsoft IE version 11. The vulnerability stems from an improperly...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2020-46037)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds read vulnerability that can be exploited by attackers to obtain information...

CS2 Network P2P Trust Management Issue Vulnerability

CS2 Network P2P is a P2P peer-to-peer networking platform. A security vulnerability exists in CS2 Network P2P 3.x and earlier versions. This vulnerability can be exploited by an attacker to conduct a man-in-the-middle attack...

Logic flaw vulnerability exists in cmseasy (CNVD-2020-51413)

EasTone enterprise website system alias CmsEasy is the only free WeChat + cell phone end + micro site + cell phone SMS + online sales + multi-language website combination of enterprise marketing management platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modi...

BBS forums suffer from SQL injection vulnerability

BBS Forum is a web application. BBS Forum has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

Buffer Overflow Vulnerability in Meitu Xiu Xiu PC Version

MeituShow is a free photo manipulation software. A buffer overflow vulnerability exists in Meitu Xiu Xiu for PC, which can be exploited by an attacker to cause a denial of service...

SQL Injection Vulnerability in Hanzhong Qiyuan Power Network Co.

Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. Hanzhong Qiyuan Power Network Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Stored Cross-site Scripting Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co.

PHPOK system is a content management system for website construction developed by Shenzhen 锟铻科技有限公司formerly known as PHPOK Studio. A stored cross-site scripting vulnerability exists in PHPOK. The vulnerability can be exploited to obtain sensitive information such as administrator cookies...

QEMU Buffer Overflow Vulnerability (CNVD-2020-44638)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the hw/net/xgmac.c file in the XGMAC Ethernet controller in versions prior to QEMU...

Logic flaws exist in the parking lot fee management system of Xiamen KTO Communication Technology Co.

Xiamen KTO Communication Technology Co., Ltd. is a professional smart parking value operator, providing safe, efficient, convenient and reliable smart parking services to customers worldwide. A logic flaw vulnerability exists in the parking fee management system of Xiamen KTO Communication...

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-46065)

Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...