2572 matches found
Code Execution Vulnerability in ZZCMS2019
ZZCMS with product investment templates, you can quickly build product investment website. For example, the pharmaceutical investment industry, health care investment industry, cosmetics investment industry, agricultural investment industry, pregnancy and child investment industry, alcohol and fo...
Information leakage vulnerability in webplus pro
Webplus pro is a content management system. An information disclosure vulnerability exists in webplus pro, which can be exploited by attackers to obtain sensitive information...
Exploit for CVE-2019-14339
CVE-2019-14339 Content Provider URI Injection on Canon PRINT...
Update: VLC Media Player Plagued By Unpatched Critical RCE Flaw
UPDATE After a German security agency reported a critical vulnerability existed in VLC open-source media player that could enable remote code execution and other malicious actions, the developers of VLC said that the media player is not vulnerable. The VLC media player, developed by the VideoLAN...
Htek UC902 VoIP phone Buffer Overflow Vulnerability
Htek UC902 VoIP phone is an IP phone from China Hanlong Technology Htek. A buffer overflow vulnerability exists in the web management interface in the Htek UC902 VoIP phone using firmware version 2.0.4.4.46. The vulnerability originates when a network system or product performs operations on memo...
Rockwell Automation PanelView 5510 Access Control Error Vulnerability
Rockwell Automation PanelView 5510 is a graphic terminal device from Rockwell Automation. An access control error vulnerability exists in the PanelView 5510 manufactured before 2019-3-13. The vulnerability stems from a network system or product not properly restricting access to resources from...
xss vulnerability in shuipfcms
ShuipFCMS is a content management system based on ThinkPHP framework as the core, using the independent grouping approach to development. Shuipfcms has an xss vulnerability. Attackers can use this vulnerability to obtain administrator cookies...
F5 BIG-IP PEM Input Validation Error Vulnerability
F5 BIG-IP PEM is a policy enforcer used in BIG-IP from F5 USA. An input validation error vulnerability exists in F5 BIG-IP PEM, which can be exploited by an attacker to cause traffic processing interruptions...
Tenda W20E V15.11.0.6_CN has a command execution vulnerability (CNVD-2019-22869)
Shenzhen Jixiang Tengda Technology Co., Ltd. is one of the first pioneers in the field of wireless network in China. Tenda W20E V15.11.0.6CN suffers from a command execution vulnerability that can be exploited by an attacker to gain server privileges...
xml entity injection vulnerability in ctcms version 2.0.2
Chongsheng Network Technology is an emerging network technology limited company. It has developed Cscms portal content management system, Ctcms network video education management system, polymerization payment, and a multi-merchant card issuance platform management system. ctcms2.0.2 version of t...
Henan Zhongyu Network Technology Company's website building system has xss vulnerability
Henan Zhongyu Network Technology Co., Ltd. is a high-tech company that provides informatization and networking solutions for enterprises, government agencies and individuals. There is an xss vulnerability in the website building system of Henan Zhongyu Network Technology Co. Attackers can use thi...
XnView Classic Buffer Overflow Vulnerability (CNVD-2019-22459)
XnView is a multi-platform software that supports image viewing, conversion and editing. A buffer overflow vulnerability exists in XnView Classic. No details of the vulnerability are available at this time...
Multiple Vulnerabilities in Shanghai Pangda's Academic Affairs System
Shanghai Pengda Computer System Development Co., Ltd. is a company dedicated to vocational education informatization solutions, products involved in education management, teaching applications, teaching services and other areas. There are multiple vulnerabilities in Shanghai Pangda's teaching...
vulscan
This is a Python-based web application for vulnerability scanning and management. The application is built using Django and has several features, including: 1. Vulnerability Scanning: The application can scan for vulnerabilities in web applications using a variety of plugins and tools. 2. Plugin...
Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2019-38770)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Hyper-V is one of the virtualization products that supports...
Multiple Schneider Electric Products Resource Management Error Vulnerability
The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...
Arbitrary code execution vulnerability in zzzphp v1.6.6 backend (CNVD-2019-17280)
zzphp is a free website building system developed using PHP. A code execution vulnerability exists in the backend of zzzphp V1.6.6, which can be exploited by attackers to gain control of the web server...
Microsoft Internet Explorer Buffer Overflow Vulnerability (CNVD-2019-16204)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A buffer overflow vulnerability exists in Microsoft IE 11. The vulnerability originates when a network system or product performs an operation in memory without proper...
Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2019-19838)
Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. A memory misreference vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...