CodeIgniter has a file read vulnerability

CodeIgniter is a small but powerful PHP framework. CodeIgniter has a file read vulnerability that can be exploited by an attacker to obtain sensitive information...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-34485)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Hyper-V in Microsoft Windows and Windows...

Microsoft Windows and Windows Server Denial of Service Vulnerability (CNVD-2021-34484)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A denial of service vulnerability exists in NTFS in Microsoft Windows and Windows Server,...

U-Center - Command Execution Vulnerability in CMDB Management

Ltd. was established on 09/26/2003. The company's business scope includes: technology development, technical services, technical consulting, transfer of achievements, production and sales: electronic products, software, data communication equipment, broadband access equipment, network security...

Patreon WordPress Cross-Site Scripting Vulnerability

Patreon is a subscription-based crowdfunding platform and Patreon WordPress is a WordPress plugin for the platform. A cross-site scripting vulnerability exists in the login form in Patreon WordPress versions prior to 1.7.2. An attacker can exploit this vulnerability to conduct cross-site scriptin...

Unauthorized Access Vulnerability in HP Officejet Pro Printer Management Page

Hewlett-Packard Trading Shanghai Co., Ltd. was registered and established on February 8, 1999 in the Market Supervision Administration of the Free Trade Zone. The company's business scope includes computer equipment, printing equipment, imaging equipment, electronic products and related parts of...

Cisco Unified Communications Manager SQL Injection Vulnerability (CNVD-2021-28255)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A SQL injection vulnerability...

Information Disclosure Vulnerability in Shentong's Large General Database

Shentong Large General Database is a computer database. An information disclosure vulnerability exists in the Avatar Large General Database, which can be exploited by an attacker to gain control of a server...

Weak Password Vulnerability in Huawei S7712 Management Page

Huawei S7712 is a routing switch with store-and-forward switching. A weak password vulnerability exists in the Huawei S7712 management page, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Crypto Email and Enterprise Mailboxes

Beijing Xiongzhiweiye Software Co., Ltd. was founded in 1996, is a professional network platform development vendors, the company's main business for the development and sales of computer network software products, and computer software, hardware products sales, agents. An unauthorized access...

Citrix Hypervisor Denial of Service Vulnerability

Citrix Systems Hypervisor is an application from Citrix Systems, Inc. It is used to simplify operations management and ensure a high-definition user experience for intensive workloads. Citrix Hypervisor has a security vulnerability that can be exploited by an attacker to trigger a denial of servi...

TP_LINK-TD-W8901G suffers from weak password vulnerability

TPLINK-TD-W8901G is a wireless router. The TPLINK-TD-W8901G suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

The vulnerability of the Windows Print Spooler component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Print Spooler component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Aruba Instant Arbitrary File Modification Vulnerability (CNVD-2021-26048)

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant suffers from an arbitrary file modification vulnerability that can be exploited by an attacker via the Web UI to overwrite arbitrary files with content under their control...

BaserCMS OS Command Injection Vulnerability

BaserCMS is an open source enterprise-level content management system cms. An OS command injection vulnerability exists in BaserCMS versions prior to 4.4.5. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary OS commands...

Cisco IOx Application Denial of Service Vulnerability

Cisco Iox is the U.S. Cisco Cisco a combination of Cisco IOS and Linux OS for secure network connectivity and the development of IOT applications for secure development environment. The Cisco IOx Application Framework's Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829...

Invigo Automatic Device Management Session Validity Check Vulnerability

Invigo Automatic Device Management ADM is a native management tool for cellular operators that enables them to detect, maintain and manage millions of devices cost-effectively and with a high degree of reliability. A session validity check vulnerability exists in several management functions in...

思科 Cisco IOS XE Wireless Controller software 跨站脚本漏洞

Cisco IOS XE Wireless Controller software is a wireless LAN controller from Cisco USA. It provides a management network function. A cross-site scripting vulnerability exists in the Cisco IOS XE Wireless Controller software, which can be exploited by an attacker to conduct a cross-site scripting...

Weak password vulnerability in HUAWEI USG2120BSR

The USG2120BSR is a firewall from Huawei Technologies Co. The HUAWEI USG2120BSR suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

SQL Injection Vulnerability in OurPHP (CNVD-2021-24517)

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. OurPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...