Huawei P30 Denial of Service Vulnerability (CNVD-2020-52405)

Huawei P30 is a smartphone from Chinese company Huawei Huawei. A denial of service vulnerability exists in Huawei P30, which stems from incorrect resource management. An attacker can exploit this vulnerability for denial of service memory leak on the phone...

Intel Graphics Drivers Buffer Overflow Vulnerability (CNVD-2020-49546)

Intel Graphics Drivers is an integrated graphics driver from Intel USA. A security vulnerability exists in Intel Graphics Drivers versions prior to 15.45.31.5127 and prior to 15.40.45.5126. An attacker can exploit this vulnerability to elevate privileges...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2020-51778)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the Scripting Engine handles memory in Microsoft IE version 11. The vulnerability stems from an improperly...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2020-46037)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds read vulnerability that can be exploited by attackers to obtain information...

CS2 Network P2P Trust Management Issue Vulnerability

CS2 Network P2P is a P2P peer-to-peer networking platform. A security vulnerability exists in CS2 Network P2P 3.x and earlier versions. This vulnerability can be exploited by an attacker to conduct a man-in-the-middle attack...

BBS forums suffer from SQL injection vulnerability

BBS Forum is a web application. BBS Forum has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

Logic flaw vulnerability exists in cmseasy (CNVD-2020-51413)

EasTone enterprise website system alias CmsEasy is the only free WeChat + cell phone end + micro site + cell phone SMS + online sales + multi-language website combination of enterprise marketing management platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modi...

Buffer Overflow Vulnerability in Meitu Xiu Xiu PC Version

MeituShow is a free photo manipulation software. A buffer overflow vulnerability exists in Meitu Xiu Xiu for PC, which can be exploited by an attacker to cause a denial of service...

SQL Injection Vulnerability in Hanzhong Qiyuan Power Network Co.

Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. Hanzhong Qiyuan Power Network Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Stored Cross-site Scripting Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co.

PHPOK system is a content management system for website construction developed by Shenzhen 锟铻科技有限公司formerly known as PHPOK Studio. A stored cross-site scripting vulnerability exists in PHPOK. The vulnerability can be exploited to obtain sensitive information such as administrator cookies...

QEMU Buffer Overflow Vulnerability (CNVD-2020-44638)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the hw/net/xgmac.c file in the XGMAC Ethernet controller in versions prior to QEMU...

Logic flaws exist in the parking lot fee management system of Xiamen KTO Communication Technology Co.

Xiamen KTO Communication Technology Co., Ltd. is a professional smart parking value operator, providing safe, efficient, convenient and reliable smart parking services to customers worldwide. A logic flaw vulnerability exists in the parking fee management system of Xiamen KTO Communication...

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-46065)

Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...

Denial of service vulnerability in mod_RSsim (CNVD-2020-48912)

modRSsim is a simulation simulation software. A denial of service vulnerability exists in modRSsim, which can be exploited by attackers to cause a denial of service...

Unauthorized Access Vulnerability in Netcentric Cloud Devices of Shenzhen Netcentric Technology Co.

Shenzhen Netcenter Technology Co., Ltd, dedicated to the global shared computing and blockchain field, amplifies everyone's power through technological innovation. Shenzhen Netcentric Technology Co., Ltd Netcentric cloud devices have unauthorized access vulnerability, attackers can use the...

SQL Injection Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co. Ltd (CNVD-2020-48968)

Extreme CMS is an open source and free PHPCMS web content management system. Ltd. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Google Chrome Code Issue Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. Google Chrome versions prior to 84.0.4147.89 have a code issue vulnerability, no detailed vulnerability details are available at this time...

Samsung Mobile Device Path Traversal Vulnerability (CNVD-2020-38180)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A path traversal vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to access system files...

Xen competitive conditions loophole

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen 4.13....

Py-EVM Security Vulnerability

Py-EVM is a Python-based implementation of an Ethernet virtual machine. A security vulnerability exists in Py-EVM version 0.2.0-alpha.33. An attacker can exploit the vulnerability to cause a denial of service...