Unspecified vulnerability in Linux kernel (CNVD-2021-13671)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 5.10.12 and earlier, which can be exploited by a local attacker to trigger via an IO request at some point during devic...

Information Disclosure Vulnerability in Atlassian JIRA Software

JIRA Software is a project and transaction tracking tool from Atlassian that is used in a wide range of work areas such as defect tracking, customer service, requirements gathering, process approvals, task tracking, project tracking and agile management. An information disclosure vulnerability...

Huawei eCNS280 Resource Management Error Vulnerability

Huawei eCNS280 is the core network equipment of Huawei's wireless broadband trunking system. In addition to providing the network functions of a traditional core network, it also virtualizes the functions of network elements and shares standardized hardware resources among multiple network elemen...

Red Hat Undertow Denial of Service Vulnerability

Red Hat Undertow is a U.S. Red Hat Red Hat, a Java-based embedded Web server, is the default Web server Wildfly Java application server. Red Hat Undertow suffers from a denial of service vulnerability that originates from an input validation error to a user, which can be exploited by an attacker ...

Oracle ZFS Storage Appliance Access Control Error Vulnerability

Oracle ZFS Storage Appliance is a storage appliance from Oracle Corporation in the United States that supports flash memory, petabytes of file storage and a built-in Oracle database. A security vulnerability exists in the Oracle ZFS Storage Appliance Kit product. An attacker could exploit the...

SQL Injection Vulnerability in iOffice.net Hospital Edition

The business scope of Guangzhou Hongfan Computer Technology Co., Ltd. includes: computer room maintenance services, information technology consulting services, data processing and storage services, digital animation production, software development and so on. SQL injection vulnerability exists in...

Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerability (CNVD-2021-09935)

Cisco Smart Software Manager Satellite is software designed to provide intelligent management capabilities for licenses. A command injection vulnerability exists in the WEB UI of Cisco Smart Software Manager Satellite 5.1.0 and prior versions. The vulnerability stems from the program not properly...

Cisco Data Center Network Manager SQL Injection Vulnerability (CNVD-2021-09940)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A SQL injection vulnerability exists in the REST API endpoint of Cisco Data Center...

Arbitrary File Deletion Vulnerability in Zhirui Public Security Information Website System

Zhirui software is a focus on network software development work team, its products voting selection system, enterprise website system, school website system, government website management system, public security public information management system is currently the most widely used website progra...

Command Execution Vulnerability in the InRouter900 Industrial Router from Johnstone (CNVD-2021-10446)

The Johnton-InRouter900 series industrial router is a 4G industrial router. A command execution vulnerability exists in the InRouter900 Industrial Router. The vulnerability stems from the program's failure to properly validate user data and can be exploited by a remote attacker to execute arbitra...

Arbitrary File Deletion Vulnerability in the InRouter900 Industrial Router from Imagicom (CNVD-2021-10443)

The Johnton-InRouter900 series industrial router is a 4G industrial router. The InRouter900 Industrial Router suffers from an arbitrary file deletion vulnerability, which originates from the program failing to properly validate user data, and can be exploited by a remote attacker to delete...

Arbitrary File Deletion Vulnerability in InRouter900 Industrial Router from Johntons

The Johnton-InRouter900 series industrial router is a 4G industrial router. The InRouter900 Industrial Router suffers from an arbitrary file deletion vulnerability, which originates from the program failing to properly validate user data, and can be exploited by a remote attacker to delete...

Arbitrary File Read Vulnerability in InRouter900 Industrial Router from Johntons

The Johnton-InRouter900 series industrial router is a 4G industrial router. The InRouter900 Industrial Router suffers from an arbitrary file read vulnerability, which originates from the program failing to properly validate user data, and can be exploited by a remote attacker to read arbitrary...

Google Chrome File System API Policy Enforcement Deficiency Vulnerability (CNVD-2021-28288)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A File System API Policy Enforcement Insufficiency vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit this vulnerabili...

Unspecified Vulnerability in Oracle Database Server (CNVD-2021-08529)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. An unspecified vulnerability exists in the Oracle Text component of Oracle Database...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Customer...

Weak password vulnerability in Samsung WLAN APs

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. A weak password vulnerability exists ...

Programming Cat Small Office Customized Classes has a dll hijacking vulnerability

Programming Cat Small Office Customized Class is a programming learning software. Programming Cat Small Office Customized Class has a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Mutt Resource Management Error Vulnerability

Mutt is a text-based e-mail client for Unix-like systems developed by Michael Elkins. A security vulnerability exists in Mutt through 2.0.4, which can be exploited by an attacker to cause significant memory consumption using a small e-mail message, and victims may not be able to see e-mail messag...

Oracle Database Server 安全漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. An unspecified vulnerability exists in the Oracle Text component of Oracle Database...