Unauthorized access vulnerability in Transmission web control

Transmission Web Control is the Transmission browser management interface. An unauthorized access vulnerability exists in Transmission web control, which can be exploited by an attacker to bypass authentication and arbitrarily control the download, delete, or upload functionality of an applicatio...

Denial of Service Vulnerability in MB80-CPU721E

Nanrui Automatic Control is a high-tech entity integrating software development, hardware development, technical service, equipment production and system integration. A denial of service vulnerability exists in MB80-CPU721E, which can be exploited by attackers to cause a denial of service...

Command Execution Vulnerability in the InRouter900 Industrial Router from Johnstone (CNVD-2021-10445)

The Johnton-InRouter900 series industrial router is a 4G industrial router. A command execution vulnerability exists in the InRouter900 Industrial Router. The vulnerability stems from the program's failure to properly validate user data and can be exploited by a remote attacker to execute arbitra...

Command Execution Vulnerability in the InRouter900 Industrial Router from Johntons

The Johnton-InRouter900 series industrial router is a 4G industrial router. A command execution vulnerability exists in the InRouter900 Industrial Router. The vulnerability stems from the program's failure to properly validate user data and can be exploited by a remote attacker to execute arbitra...

Unspecified Vulnerability in Oracle Configurator

Oracle Configurator is a sales and configuration product that provides the next generation of the latest configuration technology. An unspecified vulnerability exists in the UI Servlet component in Oracle Configurator 12.1, 12.2. An attacker could exploit this vulnerability to compromise...

Arbitrary File Deletion Vulnerability in the InRouter900 Industrial Router from Imagicom (CNVD-2021-10444)

The Johnton-InRouter900 series industrial router is a 4G industrial router. The InRouter900 Industrial Router suffers from an arbitrary file deletion vulnerability, which originates from the program failing to properly validate user data, and can be exploited by a remote attacker to delete...

Command Execution Vulnerability in the InRouter900 Industrial Router from Johnstone (CNVD-2021-10454)

The Johnton-InRouter900 series industrial router is a 4G industrial router. A command execution vulnerability exists in the InRouter900 Industrial Router. The vulnerability stems from the program's failure to properly validate user data and can be exploited by a remote attacker to execute arbitra...

Google Chrome iframe sandbox improperly implemented vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An improperly implemented iframe sandbox vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker can bypass navigation restrictio...

Heap out-of-bounds read vulnerability in jhead pr***_DQ*** function

jhead is a program for processing settings and thumbnails in Exif jpeg headers. A heap out-of-bounds read vulnerability exists in the jhead prDQ function. An attacker could exploit this vulnerability to cause the program to crash...

XSS Vulnerability in WordPress PowerPress Plugin

WordPress is the WordPress Wordpress Foundation's set of blogging platform developed using the PHP language.PowerPress is the WordPress plugin. An XSS vulnerability exists in the WordPress PowerPress plugin. An attacker can exploit the vulnerability to obtain an administrator cookie...

TP-Link TL-R470GP-AC in Denial of Service Vulnerability

The TP-Link TL-R470GP-AC is a router. The TP-Link TL-R470GP-AC is vulnerable to a denial of service vulnerability. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully constructed packet to a specif...

SQL Injection Vulnerability in TuziCMS Backend

TuziCMS TC for short is an enterprise web content management system based on PHP+MySql. A SQL injection vulnerability exists in the TuziCMS backend. An attacker can exploit the vulnerability to obtain sensitive database information...

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Desktop Calendar for PC suffers from dll hijacking vulnerability

Desktop Calendar is a calendar that is placed on your desktop. Desktop Calendar for PC suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Information leakage vulnerability in the full version of Feifei Movie & TV navigation system

The full version of Fei Fei Movie Navigation System is a free and open source PHP movie program. The full version of Feifei Movie Navigation System suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Denial of Service Vulnerability in Tenda AC9, AC15

Founded in 1999, Shenzhen Jixiang Tengda Technology Co., Ltd. is a professional supplier of network communication equipments and solutions, as well as a high-tech enterprise integrating R&D, production, supply, sales and service. A denial of service vulnerability exists in Tenda AC9, AC15, which...

Mikrotik RouterOS v6.48 suffers from a denial of service vulnerability

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A denial of service vulnerability exists in Mikrotik RouterOS v6.48, which can be exploited by an attacker to caus...

Extreme Office suffers from a memory corruption vulnerability (CNVD-2021-03437)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Xunlei 11 suffers from a local power lifting vulnerability

Thunderbolt 11 is a computer downloader software. Xunlei 11 suffers from a local elevation vulnerability. An attacker can exploit the vulnerability to elevate a user with low privileges to system privileges...

Webswing Remote Code Execution Vulnerability

Webswing is a web server that lets you run any swing application in a web browser using only pure HTML5. A remote code execution vulnerability exists in JsLink in Webswing that can be exploited by an attacker to execute code in the server...