Adobe Animate Out-of-Bounds Read Vulnerability (CNVD-2021-49188)

Adobe Animate is a multimedia authoring and computer animation program. An out-of-bounds read vulnerability exists in Adobe Animate 21.0.6 and earlier versions. An attacker could exploit this vulnerability to obtain information...

XDcms Has Arbitrary File Deletion Vulnerability

XDcms is a general purpose content management system. XDcms has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file on the server...

IBM Security Verify Access Information Disclosure Vulnerability (CNVD-2021-39691)

IBM Security Verify Access, formerly known as IBM Security Access Manager or ISAM, is designed to help you simplify user access and more securely adopt Web, mobile, IoT and cloud technologies. An information disclosure vulnerability exists in IBM Security Verify Access version 20.07. An attacker...

SQL Injection Vulnerability in Purple Electronic File Management System

hereinafter referred to as "Ziguang Software" is a leading provider of industry solutions and IT services in China. A SQL injection vulnerability exists in the Ziguang Electronic File Management System. The vulnerability can be exploited by an attacker to obtain sensitive information from the...

Vsmart Live suffers from an information disclosure vulnerability

Vsmart Live is a smartphone. Vsmart Live suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Fish Leap CMS has information leakage vulnerability

FishLeap CMS is a content management system specifically geared towards enterprise applications. An information disclosure vulnerability exists in Fish Leap CMS, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in IoT Smart Water Meter Supervision Platform of Shandong KDE Electronics Co.

IOT Smart Water Meter Supervision Platform is a smart water meter monitoring platform developed by Shandong KD Electronics Co., Ltd. with the functions of water account opening, bill payment management, data reporting and water meter management. Ltd. There is an unauthorized access vulnerability ...

WordPress plugin cross-site request forgery vulnerability (CNVD-2021-37475)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . 404 SEO Redirection Cross-site request forgery...

Weak password vulnerability in Youku Tudou Routerbot

Youku Tudou Routerbo is a smart router. A weak password vulnerability exists in Youku Tudou Routerbo, which can be exploited by attackers to obtain sensitive information...

Google TensorFlow CTCGreedyDecoder Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in Google TensorFlow CTCGreedyDecoder. An attacker can exploit this vulnerability to cause a CHECK-failure denial of service...

TensorFlow heap buffer overflow vulnerability (CNVD-2021-36543)

Google TensorFlow is an end-to-end open source machine learning platform. A heap buffer overflow vulnerability exists in the QuantizedMul implementation in TensorFlow versions prior to 2.5.0. An attacker can exploit this vulnerability by passing an invalid quantization threshold that results in a...

Google TensorFlow EditDistance Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow EditDistance. An attacker can exploit the vulnerability to trigger a null pointer dereference when implementing 'tf.rawuops.EditDistance...

WordPress Redirection for Contact Form 7 Plugin Improper Access Control Vulnerability (CNVD-2021-36045)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An improper access control vulnerability exists in WordPress Redirection for Contact Form 7 Plugin...

Canonical Ubuntu 安全漏洞

Canonical Ubuntu is a GNU/Linux operating system from the British company Canonical that focuses on desktop applications. Ubuntu Pleaser suffers from a security vulnerability that can be exploited by an attacker with multiple Pleaser vulnerabilities...

WordPress Redirection for Contact Form 7 Plugin Improper Access Control Vulnerability (CNVD-2021-36044)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An improper access control vulnerability exists in WordPress Redirection for Contact Form 7 Plugin...

Siemens Solid Edge XML External Entity Reference Vulnerability (CNVD-2021-37271)

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. A security vulnerability exists in Siemens Solid Edge. An attacker can exploit the vulnerability to disclose arbitrary files to a remote attacker...

Information leakage vulnerability in Zstack Clound of Shanghai Cloud Axis Information Technology Co.

The business scope of Shanghai Cloud Axis Information Technology Co., Ltd. includes: engaging in information technology, network technology in the field of technology development, technical services, technology transfer, technology consulting and so on. Shanghai Cloud Axis Information Technology...

File upload vulnerability in travel management system

The Travel Management System is a travel management system that uses C with source code. A file upload vulnerability exists in the Travel Management System that can be exploited by an attacker to gain control of the server...

JetBrains IntelliJ IDEA Local Code Execution Vulnerability

Jetbrains JetBrains IntelliJ IDEA is a Czech JetBrains integrated development environment for the Java language . A local code execution vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3.3. The vulnerability stems from an insufficient check when the VCS fetches the project...

Arbitrary File Read Vulnerability in GlassFish

GlassFish is a robust business compatible application server. GlassFish suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...