Arbitrary File Deletion Vulnerability in WeCenter Learning Free Edition

WeCenter is an open source knowledge-based social Q&A community program. An arbitrary file deletion vulnerability exists in the free version of WeCenter Learning, which can be exploited by an attacker to delete arbitrary files from the server...

PaulyCoin has a logic flaw vulnerability

PaulyCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PaulyCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24723)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

Multiple Microsoft Products Permission License and Access Control Issues Vulnerabilities

Microsoft Forefront Endpoint Protection is a set of endpoint security software. Microsoft Security Essentials is a set of free antivirus software that comes with Windows. Microsoft Windows Defender is a set of antivirus software that comes with Windows. The vulnerability exists in a number of...

WordPress note-press plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. note-press is a WordPress admin panel annotation plugin used in it. A SQL injection vulnerability exists in the WordPress note-pre...

Google Android System Component Information Disclosure Vulnerability (CNVD-2019-21264)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android. An attacker can exploit this vulnerability to obtain sensitive information...

The existence of arbitrary file deletion vulnerability dedecms

DedeCMS Dream Weaving Content Management System is China's Zhuozhuo Network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. dedecms there are arbitrary file deletion...

Microsoft Windows Registry Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Registry is one of the registries used to store information about system and application settings. A local elevation of privilege vulnerability exists in Microsoft Windows. A local attacker can exploi...

The vulnerability of the Wireless Data Service module of the Qualcomm Data Services component in the Android operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Wireless Data Service module of the Qualcomm Data Services operating system in Android is caused by a buffer overflow in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

Red Hat Ceph Security Bypass Vulnerability

Red Hat Ceph is a Linux PB-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system without a single point of failure based on POSIX Portable Operating System Interface, so that data can be fault-tolerant and seamlessly replicated.Ceph...

Remote Code Execution Vulnerability in Spring Framework spring-messaging Module

Spring Framework is the United States Pivotal Software's set of open source Java, Java EE application framework. The framework helps developers build high-quality applications . A remote code execution vulnerability exists in the Spring Framework spring-messaging module. An attacker can exploit t...

Google Android System Component Remote Code Execution Vulnerability (CNVD-2018-06644)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the Google Android System component. An attacker can exploit the vulnerability to execute arbitrary code in the context of an...

CVE-2017-17860

In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone...

Tor has an unspecified vulnerability

Tor The Onion Router is a second-generation implementation of onion routing, primarily used for anonymous access to the Internet. A security vulnerability exists in Tor. An attacker can exploit the vulnerability to turn off log warnings...

Apache Solr/Lucene Remote Code Execution Vulnerability

Apache Solr is an open source search server . Solr using the Java language development , mainly based on HTTP and Apache Lucene implementation. Lucene is apache Software Foundation 4 jakarta project group a subproject , is an open source full-text search engine toolkit . Apache Solr/Lucene has a...

Microsoft Windows kernel information disclosure vulnerability (CNVD-2017-32966)

Microsoft Windows Server 2008 SP2 is a series of operating systems released by Microsoft. kernel component is one of the kernel components. An information disclosure vulnerability exists in the kernel component of Microsoft Windows, which arises from a program's failure to properly handle memory...

OCaml compiler elevation of privilege vulnerability

OCaml compiler is a compiler for OCaml maintained by the OCaml community that generates standalone programs and supports batch-oriented processing. A security vulnerability exists in OCaml compiler. An attacker can exploit this vulnerability to elevate privileges...

PDNS Manager Remote Command Execution Vulnerability

PDNS Manager is an authoritative domain name server management tool for Powerdns. An arbitrary code execution vulnerability exists in PDNS Manager. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected application run by a user...

Google Android Unauthorized Operation Vulnerability (CNVD-2017-11471)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android. An attacker can exploit the vulnerability to perform unauthorized operations...

WordPress API Data Handling Error Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from an API data handling error vulnerability. An attacker can exploit this vulnerability to execute...