Google Android Touch driver boost vulnerability (CNVD-2019-37961)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, and Touch driver is one of the touch drivers. A security vulnerability exists in the Touch driver component of Android. An attacker can exploit this vulnerability to elevate privileges...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20159)

The Qualcomm MDM9607, among others, is a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in HLOS in multiple Qualcomm products. The vulnerability originates from a network system or product that does not properly validate incoming...

File Upload Vulnerability in OKLite Backend

OKLite is a set of minimalist enterprise station system, the main target group is the display of enterprise website users, so that traditional small businesses quickly deploy the site, strengthen their brand awareness, to achieve the publicity of the company's image. There is a file upload...

Google Android power lifting vulnerability (CNVD-2019-37967)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to elevate privileges...

Lenovo Solution Center Privilege Vulnerability

Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. An elevation of privilege vulnerability exists in Lenovo Solution Center version 03.12.003, which can b...

Google Android power lifting vulnerability (CNVD-2019-37968)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to elevate privileges...

Adobe Acrobat/Reader Heap Overflow Vulnerability (CNVD-2019-28658)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A heap overflow vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat and Reader Buffer Overflow Vulnerability (CNVD-2019-29265)

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Adobe Acrobat and Reader have a buffer overflow vulnerability. An attacker could exploit this...

Microsoft Windows Remote Desktop Services Remote Code Execution Vulnerability (CNVD-2019-27325)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Services...

XML Entity Injection Vulnerability in S-CMS

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS has an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive information...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29632)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at this time...

cPanel Injection Vulnerability (CNVD-2019-29634)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15. An attacker can exploit the vulnerability to execute...

cPanel Input Validation Error Vulnerability (CNVD-2019-33872)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in cPanel. Detailed vulnerability details are not available at this time...

cPanel Code Execution Vulnerability (CNVD-2019-26349)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 62.0.17. An attacker can exploit this vulnerability to execu...

Google Chrome suffers from an unspecified vulnerability (CNVD-2019-26523)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 76.0.3809.87. The vulnerability can be exploited by an attacker to obtain sensitive information by tricking a user into visiting a specially crafted website...

Code Execution Vulnerability in ZZCMS2019

ZZCMS with product investment templates, you can quickly build product investment website. For example, the pharmaceutical investment industry, health care investment industry, cosmetics investment industry, agricultural investment industry, pregnancy and child investment industry, alcohol and fo...

cPanel Input Validation Error Vulnerability (CNVD-2019-33882)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in cPanel. An attacker could exploit the vulnerability to execute code...

Information leakage vulnerability in webplus pro

Webplus pro is a content management system. An information disclosure vulnerability exists in webplus pro, which can be exploited by attackers to obtain sensitive information...

Exploit for CVE-2019-14339

CVE-2019-14339 Content Provider URI Injection on Canon PRINT...

Update: VLC Media Player Plagued By Unpatched Critical RCE Flaw

UPDATE After a German security agency reported a critical vulnerability existed in VLC open-source media player that could enable remote code execution and other malicious actions, the developers of VLC said that the media player is not vulnerable. The VLC media player, developed by the VideoLAN...