Denial of Service Vulnerability in WPS Office 2019 Professional by Zhuhai Kingsoft Office Software Co.

Kingsoft WPS is office software from Kingsoft Office Software. A denial-of-service vulnerability exists in WPS Office 2019 Professional Edition by Zhuhai Kingsoft Office Software Ltd. that can be exploited by attackers to cause a denial of service...

Shantou Sanyu Technology Co., Ltd. website building system suffers from SQL injection vulnerability.

Ltd. is a company that focuses on designing, producing and providing personalized e-commerce solutions for enterprises. Ltd. website building system suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

McAfee Endpoint Detection and Response Privileging Vulnerability (CNVD-2020-35070)

McAfee Endpoint Detection and Response EDR is a suite of endpoint threat detection and response solutions from the U.S.-based company McAfee McAfee. The product supports threat event monitoring, host traffic monitoring and automatic threat identification and other functions. A power lifting...

File upload vulnerability exists in Swordfish Forum (CNVD-2020-28107)

Swordfish Forum System is a light forum system. A file upload vulnerability exists in Swordfish Forum, which can be exploited by an attacker to upload malicious files to gain system administration privileges...

Salt Bugs Allow Full RCE as Root on Cloud Servers

The open-source Salt management framework contains high-severity security vulnerabilities that allow full remote code execution as root on servers in data centers and cloud environments. And in-the-wild attacks are expected imminently. According to F-Secure researchers, the framework, authored by...

Inogard Ebiz4u Code Execution Vulnerability

Inogard Ebiz4u is an e-procurement system from Inogard Korea. A security vulnerability exists in AxECM.cab ActiveX Control in Inogard Ebiz4u, which stems from a lack of integrity checking in the program. The vulnerability can be exploited to download files and execute code by setting the paramete...

Adobe Illustrator 2020 Memory Corruption Vulnerability (CNVD-2020-25772)

Adobe Illustrator 2020 is one of the world's most recognized vector graphics software designed by Adobe. A memory corruption vulnerability exists in Adobe Illustrator 2020. An attacker can exploit the vulnerability to execute arbitrary code...

Memory corruption vulnerability in XnView Classic jpm file (CNVD-2020-31477)

XnView Classic is an image viewing software. A memory corruption vulnerability exists in the XnView Classic jpm file. An attacker can exploit the vulnerability to execute malicious code on a user's system or cause the program to perform a denial of service...

Command execution vulnerability exists in OpsManage (CNVD-2020-31455)

OpsManage is a management platform for performing device assets, code deployment, application deployment, and scheduled tasks. OpsManage suffers from a command execution vulnerability that can be exploited by an attacker to gain server administrative privileges...

iCATCH DVR Input Validation Error Vulnerability

The iCATCH DVR is a digital video recorder DVR from China Desirable International iCATCH. An input validation error vulnerability exists in the firmware of iCATCH DVR prior to version 20200103, which arises from the program failing to properly validate the parameters of a function. An attacker...

Memory corruption vulnerability exists in WPS Office (CNVD-2020-26321)

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. WPS Office has a memory corruption vulnerability that can be exploited by attackers to cause the program to crash...

XSS Vulnerability in Construction System of Guangzhou Sanjin Network Technology Co.

Guangzhou Sanjin Network Technology Co., Ltd. is a one-stop provider of Internet application services, providing e-commerce solutions for Chinese enterprises. XSS vulnerability exists in the construction system of Guangzhou Sanjin Network Technology Co. Attackers can utilize the vulnerability to...

File Inclusion Vulnerability in youdianCMS

YouDianCMS is a computer website, mobile website, micro letter, APP, small program in one, sharing space, data automatic synchronization, is the domestic open source five station one excellent solution. youdianCMS there are file containment vulnerabilities, attackers can take advantage of the...

Unspecified vulnerability in Linux kernel (CNVD-2020-24137)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.2 powerpc platform. No detailed vulnerability details are provided at this time...

Django Cross-Site Request Forgery Vulnerability (CNVD-2020-29728)

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. A cross-site request forgery vulnerability exists in Django 3.0 and earlier versions, no detailed...

MediaWiki xss vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki versions prior to 1.34.1. The...

Denial of Service Vulnerability in Codesys v3

Codesys is a powerful PLC software programming tool. A denial of service vulnerability exists in Codesys v3, which can be exploited by an attacker to cause a denial of service...

Google Squashes High-Severity Flaws in Chrome Browser

On Thursday, Google released security patches to stomp out high-severity vulnerabilities in its Chrome browser. Patches for all the bugs Google disclosed in its security advisory roll out over the next few days. Overall, eight security bugs were addressed in Chrome browser version 80.0.3987.162 f...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2020-28018)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2020-28016)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...