CVE-2019-5747

An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components consumed by the DHCP client, server, and/or relay might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte...

Code Execution Vulnerability in Encrypted Video by Screen Recording Expert

Screen Recording Expert is a professional tool for making screen recordings. A code execution vulnerability exists when Screen Recording Expert encrypts videos. An attacker can exploit the vulnerability to execute code...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel arises from errors in the processing of objects in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

e107 Cross-Site Request Forgery Vulnerability (CNVD-2018-20077)

e107 is an open source, free and PHP and MySQL based Content Management System CMS developed by the e107 team. The system supports a variety of plug-ins and appearance of the theme , can be used as a personal blog , discussion community , archive repository and so on. A cross-site request forgery...

Google Android System elevation of privilege vulnerability (CNVD-2018-26254)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System is a component. An elevation of privilege vulnerability exists in System in Android. An attacker can exploit this vulnerability to elevate privileges...

Arbitrary File Upload Vulnerability in the Frontend of Bizlaw eCom Information Management Software

Bizlawyer eTongue information management software is based on standardized management, the use of larger law firms needs to develop a comprehensive set of management software. There is an arbitrary file upload vulnerability in the front-end of Bizlawyer eTalk Information Management Software. An...

Remote Control Vulnerability in Hologic PLC FCS

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote control vulnerability exists in the Hologic PLC FCS, which can be exploited by an attacker to arbitrarily control the FCS by sending constructed packets that conform to a private...

PACCOIN Integer Overflow Vulnerability

PACCOIN is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PACCOIN's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

HunterCoin Integer Overflow Vulnerability

HunterCoin is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in HunterCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

DigitalCloudToken Digital Error Vulnerability

DigitalCloudToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mint' function in DigitalCloudToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

GZS Token Integer Overflow Vulnerability

GZS Token GZS is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function of the smart contract implementation in GZS. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

ProgressiveToken Integer Overflow Vulnerability

ProgressiveToken is a tradable Ether ERC20 token. ProgressiveToken's smart contract implementation of the sell function has an integer overflow vulnerability where "amount sellPrice" can be zero. An attacker could exploit this vulnerability to reduce the seller's assets...

Crowdnext (CNX) Integer Overflow Vulnerability

Crowdnext CNX is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function of CNX's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...

RiptideCoin (RIPT) Integer Overflow Vulnerability

RiptideCoin RIPT is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function of RIPT's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...

Simple Object Access Protocol Command Injection

Remote command injection vulnerabilities exist in multiple SOAP requests. A remote attacker can exploit these weaknesses to execute arbitrary commands in the affected devices via a crafted request...

Multiple Cisco Products NX-OS Software SNMP Denial of Service Vulnerabilities

Cisco Nexus 2000 Series Switches are products of Cisco Corporation.Cisco Nexus 2000 Series Switches are switch devices.Fabric Modules are switch matrix modules.NX-OS Software is a set of data center-grade operating system software for the switches.Simple Network Management Protocol SNMP input...

Unspecified vulnerability in nodemailer.js

nodemailer.js is a JavaScript implementation for sending e-mail . A security vulnerability exists in nodemailer.js. An attacker can exploit the vulnerability to steal environment variables...

Unspecified vulnerability in proxy.js

proxy.js is an HTTP proxy. A security vulnerability exists in proxy.js. An attacker can exploit this vulnerability to steal environment variables...

Cisco WebEx Cross-Site Scripting Vulnerability (CNVD-2018-11321)

Cisco WebEx is the United States Cisco Cisco company's set of Web conferencing tools, the tool can assist off-site office workers to coordinate and collaborate.WebEx services include Web conferencing, telepresence video conferencing and enterprise instant messaging IM. A cross-site scripting...

IBM DB2 GSKit Privilege Acquisition Vulnerability

IBM DB2 is a set of relational database management system of American IBM Company. The system is implemented in UNIX, Linux, IBM i, z/OS, and Windows server versions.GSKit is one of a set of security management tools for IBM products. A security vulnerability exists in GSKit in IBM DB2. An attack...