CloudBees Jenkins Warnings Next Generation Plugin Improper Privileges Vulnerability

Jenkins Warnings Next Generation is Jenkins open source an application plugin . The plug-in is used to collect compiler warnings or static analysis tools to report problems and visualize the results . A privilege impropriety vulnerability exists in Jenkins Warnings Next Generation Plugin version...

Logic Flaw Vulnerability in RG-UAC Riptide Unified Internet Behavior Management and Audit System

Ltd. is a company that utilizes new technologies such as cloud computing, SDN, mobile Internet, big data, and Internet of Things to provide end-to-end solutions for users in various industries. A logic flaw vulnerability exists in the RG-UAC Ruijie Unified Internet Behavior Management and Auditin...

Command Execution Vulnerability in the WEB Management System of Riptide RSR Routers

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A command execution vulnerability exists in the WEB management system of Ruijie RSR routers. An attacker can exploit this...

SeedDMS Cross-Site Request Forgery Vulnerability

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditFolder.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

Command Execution Vulnerability in PHPWind

PHPWind is an open source community program based on PHP and MySQL. PHPWind suffers from a command execution vulnerability. An attacker can exploit this vulnerability to gain server privileges...

Weak Password Vulnerability in TP-LINKE TL-ER3220G Router

The TL-ER3220G is a dual-core multi-WAN port Gigabit enterprise VPN router. The TP-LINKE TL-ER3220G router suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

FUEL CMS Cross-Site Scripting Vulnerability (CNVD-2021-17199)

FUEL CMS is a content management system based on CodeIgniter. A cross-site scripting vulnerability exists in FUEL CMS 1.4.7. An attacker can exploit this vulnerability to conduct cross-site scripting attacks bypassing filters via /fuelCM/fuel/pages/edit/1?lang=english...

QEMU elevation of privilege vulnerability (CNVD-2021-39776)

QEMU is a suite of analog processor software. QEMU suffers from an elevation of privilege vulnerability that can be exploited by an attacker to bypass restrictions via QEMU's Virtiofsd Xattrmap option, thereby increasing privileges on the host system...

Unauthorized Access Vulnerability in yycms

yycms is a movie and television system. yycms has an unauthorized access vulnerability, which can be exploited by an attacker to gain unauthorized access and directly add friend link information in bulk...

Google Chrome Compositing Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Compositing. An attacker can exploit this vulnerability to bypass security restrictions...

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-14768)

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability to achieve remote code execution...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability to achieve remote code execution...

Memory Corruption Vulnerability in Nitro Pro (CNVD-2021-21845)

Nitro pro is a PDF production and management software. A memory corruption vulnerability exists in Nitro Pro. An attacker could exploit this vulnerability to cause the program to crash...

Unauthorized Access Vulnerability in ZXHN F460 of ZTE Corporation

ZXHN F460 is ZTE's EPON mode optical cat. An unauthorized access vulnerability exists in the ZXHN F460 of ZTE Corporation, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in EasyBuilder Pro (CNVD-2021-16898)

EasyBuilder Pro is a configuration software developed by Wyland. A denial of service vulnerability exists in EasyBuilder Pro. An attacker can exploit this vulnerability to cause the process to fall into a dead loop, resulting in a denial of service...

Arbitrary File Download Vulnerability in AmarBCR of Shanghai Anshuo Information Technology Co.

AmarBCR is a big data correlation risk monitoring system developed by Shanghai Anshuo Information Technology Co. AmarBCR of Shanghai Anshuo Information Technology Co., Ltd. suffers from an arbitrary file download vulnerability, which can be exploited by an attacker to read or download arbitrary...

F5 BIG-IP Buffer Overflow Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A buffer overflow vulnerability exists in BIG-IP, which originates when a network system or product performs an operation in...

Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)

In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...

Red Hat Ansible Information Disclosure Vulnerability (CNVD-2021-19700)

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to publish, manage, and organize computer systems. Red Hat ansible has an information disclosure vulnerability that can be exploited by an attacker to steal credentials...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...