Exim Backlink Vulnerability

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a security vulnerability that exists as a result of the following issue with symbolic links in the Exim log directory. An attacker can exploit the vulnerability to overwri...

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a heap read vulnerability. An attacker can exploit the vulnerability to trigger an OOB read from the heap...

Siemens SIMATIC OPC UA Information Disclosure Vulnerability

The Siemens SIMATIC CP443-1 OPC UA9 is a communication processor from Siemens, Germany. An information disclosure vulnerability exists in OPC UA. An attacker could exploit this vulnerability to obtain sensitive information...

Denial of Service Vulnerability in D-Link DIR-809 (CNVD-2021-37560)

The D-Link DIR-809 is a wireless router that uses RTOS. A denial of service vulnerability exists in the D-Link DIR-809. An attacker can exploit the vulnerability to cause a denial of service...

Weak Password Vulnerability in NETGEAR WNR2200

The NETGEAR WNR2200 is a wireless router device. A weak password vulnerability exists in the NETGEAR WNR2200. An attacker could exploit the vulnerability to obtain sensitive information...

Unauthorized Access Vulnerability in Axis Q1614 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis Q1614 Network Camera. An attacker could exploit this vulnerability to obtain sensitive information...

Adobe Acrobat 资源管理错误漏洞

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a post-release reuse vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

XSS vulnerability in pybbs

pybbs is a practical Java development community forum system . An XSS vulnerability exists in pybbs. An attacker can exploit this vulnerability to obtain sensitive information such as user cookies...

WordPress Ultimate Maps by Supsystic Plugin Cross-Site Scripting Vulnerability

WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Ultimate Maps by Supsystic Plugin versions prior to 1.2.5. The vulnerability stems from the program not properly filtering tab parameters before outputting them to properties...

Weak Password Vulnerability in Ruckus Wireless Ruckus 7781CM

The Ruckus 7781CM is a wireless access point product from Ruckus Wireless. The Ruckus Wireless Ruckus 7781CM suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

SQL Injection Vulnerability in Loofah Video App

Loofah Video App is a video app. Loofah Video APP suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Unspecified Vulnerability in GitLab

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in Gitlab version 11.6 an...

Samsung Email Information Disclosure Vulnerability (CNVD-2021-39551)

Samsung Email application is a cell phone application from Samsung South Korea. It provides the function of sending and receiving e-mail. An information disclosure vulnerability exists in versions prior to Samsung Email 6.1.41.0, which can be exploited by a remote attacker to obtain attachments t...

SQL Injection Vulnerability in MyBatis-Plus

Mybatis-Plus is a MyBatis enhancement toolkit to simplify CRUD operations . MyBatis-Plus suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Unbound Infinite Loop Vulnerability

Unbound is a DNS resolver that supports validation, recursion, and caching features. An infinite loop vulnerability exists in dnamepktcopy in Unbound versions prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an infinite loop...

Unbound out-of-bounds write vulnerability (CNVD-2021-32623)

Unbound is a DNS resolver that supports validation, recursion, and caching features. An out-of-bounds write vulnerability exists in sldnsbgettokenpar in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an out-of-bounds write...

Unbound Out-of-Bounds Write Vulnerability

Unbound is a DNS resolver that supports validation, recursion, and caching features. An out-of-bounds write vulnerability exists in rdatacopy in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an out-of-bounds write...

Unbound Assertion Failure Vulnerability

Unbound is a DNS resolver that supports validation, recursion, and caching features. An assertion failure vulnerability exists in dnamepktcopy in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an assertion failure...

Google Chrome Extension Security Bypass Vulnerability (CNVD-2021-35165)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 90.0.4430.93. An attacker can exploit the vulnerability to bypass navigation restrictions...

Google Chrome Security Bypass Vulnerability (CNVD-2021-35168)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in V8 in versions prior to Google Chrome 90.0.4430.93. An attacker can exploit this vulnerability to bypass security restrictions...