Google Android phNxpNciHal_ext.cc Information Disclosure Vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An information disclosure vulnerability exists in Google Android phNxpNciHalext.cc. An attacker can exploit this vulnerability to obtain sensitive information...

White Shark System (WSS) SQL Injection Vulnerability

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A SQL injection vulnerability exists in White Shark...

Textpattern Arbitrary File Upload Vulnerability

Textpattern is a free open source content management system based on PHP and MySQL. Textpattern has an arbitrary file upload vulnerability. An attacker can use the fileinsert function in include/txpfile.php to upload arbitrary files...

Unspecified Vulnerability in Samsung Galaxy Watch PlugIn

Samsung Galaxy Apps is a pre-installed application store program for Samsung mobile devices from Samsung South Korea. Galaxy Watch PlugIn 2.2.05.21033151 previously had a security vulnerability that could be exploited by an attacker to disclose the Wi-Fi password of a connection to a user's...

74CMS SQL Injection Vulnerability (CNVD-2021-43389)

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can exploit this vulnerability to inject SQL statements via the x parameter of plus/ajaxstreet.php...

74CMS SQL Injection Vulnerability (CNVD-2021-43391)

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the key parameter of plus/ajaxstreet.php...

Unspecified vulnerability in BetterLinks WordPress plugin (CNVD-2021-44290)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in BetterLinks WordPress plugin versions prior to 2.0.4, which stems...

Google Android elevation of privilege vulnerability (CNVD-2021-43397)

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an out-of-bounds write due to uninitialized data in the memory management driver. An...

Google Android elevation of privilege vulnerability (CNVD-2021-43400)

Google Android is a Linux-based open source operating system from the Google Open Handheld Alliance Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from a memory corruption due to double release in the memory management driver. An attacker coul...

The vulnerability of Microsoft Windows Defender operating system allows a hacker to trigger a service failure.

The vulnerability of Microsoft Windows Defender operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Information leakage vulnerability in Baisou Video HD APP

Baisou Video HD APP is a video player. Baisou Video HD APP has an information disclosure vulnerability. An attacker can exploit the vulnerability to backup the app and obtain sensitive information...

CVE-2021-20728

Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

Jira Server and Jira Data Center cross-site scripting vulnerability (CNVD-2021-44763)

Atlassian JIRA Server and Jira Server & Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. The system is mainly used for tracking and managing all kinds of problems and defects in the workplace.Jira Server & Dat...

PT-2021-15137 · Google · Asylo

Name of the Vulnerable Software and Affected Versions: Asylo versions prior to 0.6.2 Description: An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. Recommendations: For Asylo versions prior to 0.6.2, update past 0.6.2 or apply the git commit...

Denial of Service Vulnerability in CENTUM VP DCS System

The CENTUM VP DCS system is a Shun Control configuration application. A denial of service vulnerability exists in the CENTUM VP DCS system. An attacker could exploit this vulnerability to cause a denial of service...

Microhome Software Technology (Hangzhou) Co., Ltd. website builder system suffers from an arbitrary file read vulnerability

Microsoft Technology Hangzhou Co., Ltd. is a professional ECM Collaboration Management Software and BPM Business Process Management Software R & D and solution provider. There is an arbitrary file reading vulnerability in the website building system of Microhome Software Technology Hangzhou Co. A...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Generation System (CNVD-2021-41721)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers to obtain...

FFmpeg heap buffer overflow vulnerability (CNVD-2021-39759)

FFmpeg is a complete solution for recording, converting and streaming audio and video. A heap buffer overflow vulnerability exists in crossfadesamplesfltp in libavfilter/afafade.c in FFmpeg version 4.2. An attacker can exploit this vulnerability to cause memory corruption...

ZenFone 4 Max (ZC520KL) suffers from an information disclosure vulnerability

ZenFone 4 Max ZC520KL is a smartphone. An information disclosure vulnerability exists in ZenFone 4 Max ZC520KL. An attacker can exploit the vulnerability to obtain sensitive information...

Google Chrome post-release reuse vulnerability (CNVD-2021-41140)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability in WebAuthentication in versions prior to Google Chrome 91.0.4472.77 can be exploited by a remote attacker to corrupt the rendere...