Denial of service vulnerability in mod_RSsim (CNVD-2020-48912)

modRSsim is a simulation simulation software. A denial of service vulnerability exists in modRSsim, which can be exploited by attackers to cause a denial of service...

Unauthorized Access Vulnerability in Netcentric Cloud Devices of Shenzhen Netcentric Technology Co.

Shenzhen Netcenter Technology Co., Ltd, dedicated to the global shared computing and blockchain field, amplifies everyone's power through technological innovation. Shenzhen Netcentric Technology Co., Ltd Netcentric cloud devices have unauthorized access vulnerability, attackers can use the...

SQL Injection Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co. Ltd (CNVD-2020-48968)

Extreme CMS is an open source and free PHPCMS web content management system. Ltd. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Google Chrome Code Issue Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. Google Chrome versions prior to 84.0.4147.89 have a code issue vulnerability, no detailed vulnerability details are available at this time...

Samsung Mobile Device Path Traversal Vulnerability (CNVD-2020-38180)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A path traversal vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to access system files...

Xen competitive conditions loophole

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen 4.13....

Py-EVM Security Vulnerability

Py-EVM is a Python-based implementation of an Ethernet virtual machine. A security vulnerability exists in Py-EVM version 0.2.0-alpha.33. An attacker can exploit the vulnerability to cause a denial of service...

XSS Vulnerability in Bole Card Issuance System of Zunyi Xintengda Information Technology Co.

Zunyi Xintengda Information Technology Co., Ltd. is a professional e-commerce operation and network marketing services company. Zunyi Xintengda Information Technology Co., Ltd. Bole card issuance system has an XSS vulnerability, which can be exploited by attackers to obtain sensitive information...

Extreme OFFICE 2019 suffers from a buffer overflow vulnerability in Beijing Haiteng Times Technology Co.

Extreme OFFICE 2019 is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Ltd. Extreme OFFICE 2019 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code or cause a denial of service...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-35441)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server. No detailed vulnerability details are provided at this time...

Adobe Illustrator Buffer Overflow Vulnerability (CNVD-2020-36222)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Illustrator. An attacker could exploit this vulnerability to execute arbitrary code...

Century Star Network Limited website builder system suffers from SQL injection vulnerability

Century Star Network was founded in October 2004, mainly engaged in brand website construction, promotion service providers, for growing enterprises to provide one-stop information network marketing solutions. There is a SQL injection vulnerability in Century Star Network Limited's website buildi...

Multiple Huawei products improperly certified for vulnerability

The Huawei P30, among others, is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in Huawei P30, P30 Pro and Tony-AL00B that stems from the program not properly authenticating the identity of the message sender. An attacker can exploit the vulnerability by...

Memory Corruption Vulnerability in WPS Office for Windows (CNVD-2020-34026)

WPS Office for Windows is the software of Zhuhai Kingsoft Office Software Co., Ltd, which can realize the text, table, presentation and many other functions commonly used in office software. A memory corruption vulnerability exists in WPS Office for Windows, which can be exploited by attackers to...

Jinwei cell phone mall system backend existence of arbitrary file deletion vulnerability

Jinwei Mobile Mall is a mall management system for micro-business customers with public numbers. There is an arbitrary file deletion vulnerability in the background of the Jinwei Mobile Mall system. An attacker can use this vulnerability to traverse the files in any directory and delete any file ...

Google Android System Buffer Overflow Vulnerability (CNVD-2020-33220)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by an attacker to gain access to information...

Logic Flaw Vulnerability in Shop7z Online Mall Shopping System Fashion Edition

Shop7z belongs to Shijiazhuang Zhenhong Network Technology Co., Ltd. and has been committed to enterprise Internet application related services since 2004. A logic flaw vulnerability exists in the fashion version of the Shop7z online mall shopping system. An attacker can exploit the vulnerability...

Extreme Viewing suffers from a heap overflow vulnerability (CNVD-2020-33238)

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

XSS Vulnerability in the Health Collection and Reporting System of Shanxi Xianqi Technology Co.

Health Collection and Reporting System is a data management system developed using PHP+mysql. Shanxi Xianqi Technology Co., Ltd Health Collection and Reporting System has an XSS vulnerability that can be exploited by attackers to obtain an administrator cookie...

SQL Injection Vulnerability in EPX3000 Configuration Management System

EPX3000 series belongs to high-performance multimedia communication switching equipments, which are mainly suitable for all kinds of enterprise multimedia communication business applications. An SQL injection vulnerability exists in the EPX3000 configuration management system, which can be...