Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2021-33835)

Oracle VM VirtualBox is a powerful cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.20. An attacker can exploit this vulnerability to compromise Oracle VM VirtualBox by logging into the...

Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30875)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 5.7.33, 8.0.23, and earlier versions. An attacker could exploit this vulnerability to affect availability...

GPAC memory leak vulnerability (CNVD-2021-30180)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the gfhintertracknew function in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

MGASA-2021-0194 Updated clamav packages fix security vulnerability

The updated packages fix a security vulnerability: A vulnerability in the email parsing module in Clam AntiVirus ClamAV Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability i...

Arbitrary File Deletion Vulnerability in CodeIgniter

CodeIgniter is a PHP framework. CodeIgniter has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-29105)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in NTFS in Microsoft Windows and Windows...

SAP NetWeaver AS JAVA cross-site scripting vulnerability (CNVD-2021-29100)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver AS JAVA versions 7.10 and 7.11. An attacker can...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-29104)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Windows Services and Controllers...

Denial of Service Vulnerability in Suntech Cloud QTouch Configuration Software General Edition

QTouch configuration software is a professional cross-platform automation software launched by Wuhan SunTone Intelligent Technology Co. A denial of service vulnerability exists in the general version of SunTouch Cloud QTouch Configuration Software. An attacker can exploit this vulnerability to...

Siemens SIMOTICS CONNECT 400 Denial of Service Vulnerability (CNVD-2021-28705)

SIMOTICS CONNECT 400 is a connector and sensor box mounted on a low-voltage motor that provides analysis data for the MindSphere application SIDRIVE IQ Fleet. A denial of service vulnerability exists in the Siemens SIMOTICS CONNECT 400. The vulnerability is due to the DNS domain record...

Denial of Service Vulnerability in ABBYY FineReader (CNVD-2021-30853)

ABBYY FineReader is an all-in-one OCR and PDF software application. ABBYY FineReader suffers from a denial of service vulnerability. An attacker can exploit the vulnerability to cause the program to crash...

INSMA Wifi Mini Spy 1080P HD Security IP Camera Cross-Site Request Forgery Vulnerability

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. The INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to access the web via all fields...

Rust integer overflow vulnerability (CNVD-2021-28296)

Rust is a systems programming language characterized by fast operation, the ability to prevent segmentation errors, and thread-safety. An integer overflow vulnerability exists in the Zip implementation of the standard library in versions of Rust prior to 1.52.0. An attacker can exploit this...

Remote Command Execution Vulnerability in the Console of Chianxin Tianrong Terminal Security Management System

Chianxin Tianrong Terminal Security Management System is an integrated terminal security product solution for government and enterprise organizations. The product integrates anti-virus, terminal security control, terminal access, terminal audit, peripheral control, EDR and other functions, is...

Learnsite Remote Elevation of Privilege Vulnerability

Learnsite is an information technology classroom learning platform. A remote elevation of privilege vulnerability exists in the JudgIsAdmin function in /Manager/index.aspx in Learnsite version 1.2.5.0. An attacker can exploit this vulnerability by modifying the first letter of the user cookie key...

ASUS BMC Firmware Security Feature Issue Vulnerability (CNVD-2021-36011)

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a security signature issue vulnerability that stems from a buffer overflow vulnerability due to the Radius configuration function failing to validate the length of a user-entered string. A remote attacker could...

The vulnerabilities of the crypto/x509 libraries and the golang.org/x/crypto/cryptobyte library in the Go programming language allow attackers to induce a service failure.

The vulnerability of the crypto/x509 libraries and golang.org/x/crypto/cryptobyte programming language is related to errors in the certificate validation process. Exploiting this vulnerability allows an attacker to cause service interruptions...

Google Android QuickContactActivity.java Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in Google Android QuickContactActivity.java. An attacker can exploit this vulnerability to obtain sensitive informati...

Python Bleach 跨站脚本漏洞

Python Bleach is a Python based HTML cleanup library. Python Bleach suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trigger cross-site scripting in order to run JavaScript code in the context of a website...

FreeBSD Injection Vulnerability

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. FreeBSD suffers from an injection vulnerability that can be exploited by an attacker to cause the driver to misinterpret portions of the payload of a large package as separate packages...