XSS Vulnerability in Bole Card Issuance System of Zunyi Xintengda Information Technology Co.

Zunyi Xintengda Information Technology Co., Ltd. is a professional e-commerce operation and network marketing services company. Zunyi Xintengda Information Technology Co., Ltd. Bole card issuance system has an XSS vulnerability, which can be exploited by attackers to obtain sensitive information...

Extreme OFFICE 2019 suffers from a buffer overflow vulnerability in Beijing Haiteng Times Technology Co.

Extreme OFFICE 2019 is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Ltd. Extreme OFFICE 2019 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code or cause a denial of service...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-35441)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server. No detailed vulnerability details are provided at this time...

Adobe Illustrator Buffer Overflow Vulnerability (CNVD-2020-36222)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Illustrator. An attacker could exploit this vulnerability to execute arbitrary code...

Century Star Network Limited website builder system suffers from SQL injection vulnerability

Century Star Network was founded in October 2004, mainly engaged in brand website construction, promotion service providers, for growing enterprises to provide one-stop information network marketing solutions. There is a SQL injection vulnerability in Century Star Network Limited's website buildi...

Multiple Huawei products improperly certified for vulnerability

The Huawei P30, among others, is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in Huawei P30, P30 Pro and Tony-AL00B that stems from the program not properly authenticating the identity of the message sender. An attacker can exploit the vulnerability by...

Memory Corruption Vulnerability in WPS Office for Windows (CNVD-2020-34026)

WPS Office for Windows is the software of Zhuhai Kingsoft Office Software Co., Ltd, which can realize the text, table, presentation and many other functions commonly used in office software. A memory corruption vulnerability exists in WPS Office for Windows, which can be exploited by attackers to...

Jinwei cell phone mall system backend existence of arbitrary file deletion vulnerability

Jinwei Mobile Mall is a mall management system for micro-business customers with public numbers. There is an arbitrary file deletion vulnerability in the background of the Jinwei Mobile Mall system. An attacker can use this vulnerability to traverse the files in any directory and delete any file ...

Google Android System Buffer Overflow Vulnerability (CNVD-2020-33220)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by an attacker to gain access to information...

Logic Flaw Vulnerability in Shop7z Online Mall Shopping System Fashion Edition

Shop7z belongs to Shijiazhuang Zhenhong Network Technology Co., Ltd. and has been committed to enterprise Internet application related services since 2004. A logic flaw vulnerability exists in the fashion version of the Shop7z online mall shopping system. An attacker can exploit the vulnerability...

Extreme Viewing suffers from a heap overflow vulnerability (CNVD-2020-33238)

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

XSS Vulnerability in the Health Collection and Reporting System of Shanxi Xianqi Technology Co.

Health Collection and Reporting System is a data management system developed using PHP+mysql. Shanxi Xianqi Technology Co., Ltd Health Collection and Reporting System has an XSS vulnerability that can be exploited by attackers to obtain an administrator cookie...

SQL Injection Vulnerability in EPX3000 Configuration Management System

EPX3000 series belongs to high-performance multimedia communication switching equipments, which are mainly suitable for all kinds of enterprise multimedia communication business applications. An SQL injection vulnerability exists in the EPX3000 configuration management system, which can be...

Denial of Service Vulnerability in WPS Office 2019 Professional by Zhuhai Kingsoft Office Software Co.

Kingsoft WPS is office software from Kingsoft Office Software. A denial-of-service vulnerability exists in WPS Office 2019 Professional Edition by Zhuhai Kingsoft Office Software Ltd. that can be exploited by attackers to cause a denial of service...

Shantou Sanyu Technology Co., Ltd. website building system suffers from SQL injection vulnerability.

Ltd. is a company that focuses on designing, producing and providing personalized e-commerce solutions for enterprises. Ltd. website building system suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

McAfee Endpoint Detection and Response Privileging Vulnerability (CNVD-2020-35070)

McAfee Endpoint Detection and Response EDR is a suite of endpoint threat detection and response solutions from the U.S.-based company McAfee McAfee. The product supports threat event monitoring, host traffic monitoring and automatic threat identification and other functions. A power lifting...

PT-2020-8063

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations: At the moment, there is no information about a newer version...

PT-2020-8064

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations: At the moment, there is no information about a newer version...

File upload vulnerability exists in Swordfish Forum (CNVD-2020-28107)

Swordfish Forum System is a light forum system. A file upload vulnerability exists in Swordfish Forum, which can be exploited by an attacker to upload malicious files to gain system administration privileges...

Salt Bugs Allow Full RCE as Root on Cloud Servers

The open-source Salt management framework contains high-severity security vulnerabilities that allow full remote code execution as root on servers in data centers and cloud environments. And in-the-wild attacks are expected imminently. According to F-Secure researchers, the framework, authored by...