SQL Injection Vulnerability in Kotto's Fully Intelligent Parking Video Charging System (CNVD-2021-11044)

Xiamen KTO Communication Technology Co., Ltd. is a static transportation system solution provider. A SQL injection vulnerability exists in the KETO Fully Intelligent Parking Video Charging System. An attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2021-22166

An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2021-05523)

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. A stored cross-site scripting vulnerability exists in the Web...

SQL Injection Vulnerability in YouYi Cms

Youyi cms is a movie and TV station building system. UE cms has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Juniper Networks Junos OS MX Security Vulnerability

Juniper Networks Junos OS MX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Junos OS MX that could be exploited by an attacker to cause a denial o...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-11031)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute code on the target host...

北京坤豆 Mubu 授权问题漏洞

Mubu is a platform for online writing from Mubu, a company based in Beijing, China. An authorization issue vulnerability exists in Mubu version 2.2.1, which stems from its failure to strictly limit user privileges and can be exploited by a local attacker to execute system commands...

SQL Injection Vulnerability in Heybbs us***.php File

Heybbs is a front-end based on bootstrap + js + css, back-end php + mysql development of community programs. A SQL injection vulnerability exists in the Heybbs us.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in YouYi cms yy***_dd***.php File

Youyi cms is a movie and TV station building system. A SQL injection vulnerability exists in the YouYi cms yydd.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Command execution vulnerability in FitCloud app

FitCloud app is online smart bracelet. A command execution vulnerability exists in the FitCloud app. An attacker can exploit the vulnerability to execute commands on the server...

Design/Logic Flaw

Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Unauthorized Access Vulnerability in ZZCMS

zzcms is a building CMS that is biased for personal website building and corporate website building. An unauthorized access vulnerability exists in ZZCMS, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in Huawei Router WS5100

The WS5100 is a Huawei router. The Huawei router WS5100 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service attack...

Extreme Office suffers from a memory corruption vulnerability (CNVD-2021-03417)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Hgiga MailSherlock SQL注入漏洞

HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. HGiga MailSherlock suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to inject and execute SQL commands in URL parameters...

Zammad 代码问题漏洞

Zammad is a Web-based open source helpdesk/customer support system. An information disclosure vulnerability exists in Zammad versions prior to 3.4.1. The vulnerability stems from the way Massenversand's implementation of the SMS configuration interface presents the results of test requests to the...

Binary Vulnerability in Micropoint Baihui Intelligent Defense Software Personal Edition

Micropoint Baihui Intelligent Defense Software Personal Edition is the third generation of anti-virus software. Micropoint Intelligent Defense Personal Edition has a binary vulnerability. An attacker can exploit this vulnerability to cause a system crash via a constructed program...

MediaWiki suffers from an unspecified vulnerability (CNVD-2021-38679)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.35.1 and earlier...

Command execution vulnerability in Python dill module

Python is a cross-platform computer programming language. dill is an extension of the python serialization module pickle. A command execution vulnerability exists in the Python dill module. An attacker can exploit this vulnerability to gain server privileges...