Arbitrary File Download Vulnerability in AmarALS Credit Risk Management System

AmarALS Credit Risk Management System is a "Credit Risk Management Support System" covering all aspects of credit risk management for commercial banks. An arbitrary file download vulnerability exists in the AmarALS Credit Risk Management System, which can be exploited by an attacker to download...

Weak Password Vulnerability in 3G/4G Router of Shenzhen Hongdian Technology Co.

3G/4G Router is a router device of Shenzhen Hongdian Technology Co. A weak password vulnerability exists in the Shenzhen Hongdian Technology Co. 3G/4G Router, which can be exploited by attackers to obtain sensitive information...

Cisco SD-WAN vEdge Buffer Overflow Vulnerability

Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions. The Cisco SD-WAN vEdge has a buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow by sending malicious traffic...

Weak Password Vulnerability in GoodVision Video Conferencing System (CNVD-2021-36251)

Shenzhen Yinpeng Cloud Computing Co., Ltd. is a leading provider of cloud computing products and services in China. A weak password vulnerability exists in the GoodVision video conferencing system, which can be exploited by attackers to obtain sensitive information...

Google Android LK elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android LK has a security vulnerability. An attacker can exploit this vulnerability to elevate privileges...

SQL Injection Vulnerability in Hefei Chenguang Technology Website Building System (CNVD-2021-34559)

Hefei Chenguang Technology is a company engaged in website construction and website production. Hefei Chenguang Technology website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Weak Password Vulnerability in D-Link DIR-600

The D-Link DIR-600 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-600 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Discord Recon Server Code Injection Vulnerability

Discord Recon Server is an AI robot from Discord USA. Discord Recon Server version 0.0.1 suffers from a code injection vulnerability that originates from remote code execution and can be exploited by a remote attacker to execute commands on the server...

File Upload Vulnerability in Zhongke Yunlian ERP System

Ltd. is a limited company with CloudLink POS-ERP management system and FoodMaker restaurant management system as its main business. A file upload vulnerability exists in Zhongke Yunlian ERP system, which can be exploited by attackers to gain control of the server...

TP-LINK TD-W8951ND suffers from weak password vulnerability

TP-Link TD-W8951ND is a wireless router product. TP-LINK TD-W8951ND has a weak password leak. , which is exploited by attackers to obtain sensitive information...

Command execution vulnerability in RG-RAC200b (CNVD-2021-32471)

The RG-RAC200b is a wireless controller. A command execution vulnerability exists in the RG-RAC200b that can be exploited by an attacker to gain server control privileges...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2021-30935)

Oracle WebLogic Server is a cloud-native, enterprise-grade Java platform application server for multi-tier distributed enterprise application development and deployment. A security vulnerability exists in the Core component of Oracle WebLogic Server versions 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, an...

ImageMagick 安全漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert or write images in multiple formats. ImageMagick has security vulnerabilities that can be exploited by attackers to exploit multiple vulnerabilities in ImageMagick...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-29433)

OpenClinic GA is an open source hospital integrated information management system . An SQL injection vulnerability exists in the assetStatus parameter in getAssets.jsp in OpenClinic GA version 5.173.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injectio...

Unauthorized Access Vulnerability in webcamxpXP 5

webcamXP is webcam and webcam software for Windows. An unauthorized access vulnerability exists in webcamxpXP 5. An attacker can exploit the vulnerability to obtain sensitive information...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-29427)

OpenClinic GA is an open source hospital integrated information management system . An SQL injection vulnerability exists in the serviceuid parameter in getAssets.jsp in OpenClinic GA version 5.173.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-29432)

OpenClinic GA is an open source hospital integrated information management system . An SQL injection vulnerability exists in the code parameter in getAssets.jsp in OpenClinic GA version 5.173.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attac...

SQL Injection Vulnerability in URLshorting

URLshorting is a URL shortening source code. URLshorting suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Unauthorized Access Vulnerability in Baidu.com Windows Version

Baidu.com is a cloud service product. An unauthorized access vulnerability exists in the Windows version of Baidu.com. An attacker can exploit the vulnerability by restarting Baidu.com to bypass the "lock" feature...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-34474)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Windows Security Kernel Mode in...