Code execution vulnerability in HongCMS (CNVD-2019-40721)

HongCMS is an open source lightweight content management system CMS. A code execution vulnerability exists in HongCMS. An attacker can exploit this vulnerability to gain server privileges...

Unspecified Vulnerability in Moodle (CNVD-2019-35811)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle. No detailed vulnerability details are currently available...

SQL injection vulnerability in asp website builder system pr***.asp of Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

ZZZCMS zzzphp input validation error vulnerability

ZZZCMS zzzphp is a content management system CMS. An input validation error vulnerability exists in ZZZCMS zzzphp v1.7.2, which can be exploited by an attacker to execute arbitrary code...

ngiflib buffer overflow vulnerability (CNVD-2019-32484)

ngiflib is written in C language GIF image format decoding library. A buffer overflow vulnerability exists in the WritePixel of the ngiflib.c file in ngiflib version 0.4, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Google Android Touch driver boost vulnerability (CNVD-2019-37961)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, and Touch driver is one of the touch drivers. A security vulnerability exists in the Touch driver component of Android. An attacker can exploit this vulnerability to elevate privileges...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20159)

The Qualcomm MDM9607, among others, is a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in HLOS in multiple Qualcomm products. The vulnerability originates from a network system or product that does not properly validate incoming...

File Upload Vulnerability in OKLite Backend

OKLite is a set of minimalist enterprise station system, the main target group is the display of enterprise website users, so that traditional small businesses quickly deploy the site, strengthen their brand awareness, to achieve the publicity of the company's image. There is a file upload...

Google Android power lifting vulnerability (CNVD-2019-37967)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to elevate privileges...

Google Android power lifting vulnerability (CNVD-2019-37968)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to elevate privileges...

Lenovo Solution Center Privilege Vulnerability

Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. An elevation of privilege vulnerability exists in Lenovo Solution Center version 03.12.003, which can b...

Adobe Acrobat/Reader Heap Overflow Vulnerability (CNVD-2019-28658)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A heap overflow vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat and Reader Buffer Overflow Vulnerability (CNVD-2019-29265)

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Adobe Acrobat and Reader have a buffer overflow vulnerability. An attacker could exploit this...

Microsoft Windows Remote Desktop Services Remote Code Execution Vulnerability (CNVD-2019-27325)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Services...

XML Entity Injection Vulnerability in S-CMS

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS has an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive information...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29632)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at this time...

cPanel Injection Vulnerability (CNVD-2019-29634)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15. An attacker can exploit the vulnerability to execute...

cPanel Code Execution Vulnerability (CNVD-2019-26349)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 62.0.17. An attacker can exploit this vulnerability to execu...

cPanel Input Validation Error Vulnerability (CNVD-2019-33872)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in cPanel. Detailed vulnerability details are not available at this time...

Google Chrome suffers from an unspecified vulnerability (CNVD-2019-26523)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 76.0.3809.87. The vulnerability can be exploited by an attacker to obtain sensitive information by tricking a user into visiting a specially crafted website...