Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-68035)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

File Upload Vulnerability in easySite Content Management System

CSCL is a provider of artificial intelligence technology and informatization software and platforms. A file upload vulnerability exists in easySite Content Management System, which can be exploited by attackers to gain control of the server...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-68048)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Apple macOS Mojave input validation error vulnerability (CNVD-2020-65930)

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers. Apple macOS Mojave has a security vulnerability that can be exploited by attackers to bypass sandboxing restrictions...

Apple macOS Catalina Competitive Conditions Issue Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.5, which originates from an application that can execute arbitrary code using kernel privileges. No details of the...

Adobe Acrobat and eader Improper Access Control Vulnerability

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. An improper access control vulnerability exists in Adobe Acrobat and Reader. An attacker can exploit this vulnerability to achieve local elevation of...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-65215)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Stored Cross-site Scripting Vulnerability in Pollution Source Online Monitoring System of Beijing Wanwei Yingchuang Technology Development Co.

Beijing Wanwei Yingchuang Technology Development Co., Ltd. is committed to the research, development and application of products and technologies in the field of environmental protection Internet of Things. A stored cross-site scripting vulnerability exists in the online pollution source monitori...

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59411)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...

Akamai and Snyk Partnership Creates a Powerful Combination for In-Browser Script Protection

A web experience begins with the sum of the code you created. But it also includes all the code the user is put in contact with when loading your website. This means the attack surface to monitor for web application software threats is not just your code repositories, but the sum of the assets re...

Information leakage vulnerability in CSC-850 of Beijing Sifang Relay Automation Co., Ltd (CNVD-2020-58374)

The CSC850 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. An information disclosure vulnerability exists in the CSC-850 of Beijing Sifang Relay Automation Company Limited, which can be...

Memory corruption vulnerability exists in INFRAWARE POLARIS OFFICE (CNVD-2020-58336)

POLARIS OFFICE is a mobile office software developed for mobile terminals by the Korean company INFRAWARE. A memory corruption vulnerability exists in INFRAWARE POLARIS OFFICE, which can be exploited by attackers to cause a denial of service attack...

Binary Vulnerability in Advantech WebAccess HMI PanelSim.exe

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A binary vulnerability exists in Advantech WebAccess HMI PanelSim.exe, which can be exploited by attackers to cause a denial of service on the server...

Unicom Optical Cat wolink plug-in has information leakage vulnerability

The Unicom Optical Cat is a router. There is an information leakage vulnerability in the wolink plugin of CommuniLink Optical Cat, which is caused by the lack of authentication process of the plugin and can be exploited by attackers to obtain sensitive information...

Google Android libstagefright integer overflow vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in Android-11 version libstagefright. The vulnerability stems from an integer overflow. Allows an attacker to remotely code execute...

Rapid7 and Snyk Are on the Run(time) with Expanded SCA Capabilities

Earlier this year, Rapid7 and Snyk partnered together with the goal of securing cloud-native apps across the software development lifecycle SDLC. As modern development teams continue to adopt new technology that helps them accelerate their efforts, security teams are tasked with making sure they...

Palo Alto Networks PAN-OS Management Interface Command Injection Vulnerability

Palo Alto Networks PAN-OS is a set of operating systems developed for its firewall appliances. An OS command injection vulnerability exists in the Palo Alto Networks PAN-OS management interface that could be exploited by an attacker to execute arbitrary operating system commands...

Heap Overwrite Vulnerability (CNVD-2020-58855) exists in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing

Light Viewer is a professional image viewing software. A heap out-of-bounds write vulnerability exists in Shenzhen Xunlei.com Culture Co. An attacker can exploit this vulnerability to cause the software to crash...

File Upload Vulnerability in Mantis Chinese Enhanced Edition

Mantis is a lightweight open source defect tracking system based on PHP technology to provide project management and defect tracking services in the form of Web operations . A file upload vulnerability exists in the Chinese enhanced version of Mantis. An attacker can exploit the vulnerability to...

2020 CWE Top 25 Most Dangerous Software Weaknesses

The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2020 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesses list. The Top 25 uses data from the National Vulnerability...