Information leakage vulnerability in Doogee Mobile for Android Extreme Edition

The business scope of Wuhan Douyu Network Technology Co., Ltd. includes: technology development, technology transfer, technology consulting and technical services in the field of computer and network technology. An information leakage vulnerability exists in the Android Extreme version of Douyu's...

Command Execution Vulnerability in Curtain Client

Curtain Client is a mind mapping software. A command execution vulnerability exists in the Curtain Client, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

Binary Vulnerability in Nidesoft 3GP Video Converter

Nidesoft 3GP Video Converter supports all cell phone video formats. 3GP Converter converts so as to support a full range of video formats. Including MPEG1/2/4, WMV, MP4, MOV, H.264/MPEG-4 AVC to 3GP, MPEG-4 video. A binary vulnerability exists in Nidesoft 3GP Video Converter. An attacker can...

Unauthorized Access Vulnerability in EDAS Hands-On Dedicated System

Aliyun, an Alibaba Group company, is a leading global cloud computing and artificial intelligence technology company. An unauthorized access vulnerability exists in the EDAS hands-on dedicated system, which can be exploited by an attacker to gain unauthorized access to sensitive information...

Binary Vulnerability in Rexchip Chip (CNVD-2020-75212)

With a R&D team specializing in system-on-chip design and algorithm research, Rexchip Microelectronics Corporation provides professional chip solutions for high-end intelligent hardware, cell phone peripherals, tablet PCs, TV set-top boxes, industrial control and other fields. A binary...

SAP AS ABAP and SAP S4 HANA Improper Authentication Vulnerabilities

SAP Netweaver is a service-oriented, integrated application platform from SAP, which provides a development and runtime environment for SAP applications. The platform mainly provides development and operation environment for SAP applications.ABAP is an application server running in NetWeaver and...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-39512)

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to achieve remote code execution...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-39510)

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to achieve remote code execution...

Google Chrome filesystem security bypass vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome filesystem. An attacker can exploit this vulnerability to bypass security restrictions...

SAP Fiori Launchpad Cross-Site Scripting Vulnerability

SAP Fiori is SAP's user experience UX design system for SAP applications, which provides designers and developers with a set of tools and guidelines to quickly develop applications for any platform, providing a consistent, innovative experience for creators and users.SAP Fiori Launchpad is the SA...

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) Cross-Site Request Forgery Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSVA is an appliance for securing communications from Trend Micro. The Trend Micro InterScan Messaging Security Virtual Appliance IMSVA suffers from a cross-site request forgery vulnerability that arises from a web application that does...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-08823)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word. The vulnerability stems from the program not properly handling objects in memory. An attacker can exploit the vulnerability by...

Remote code execution

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

Microsoft Windows KernelStream Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows KernelStream. The...

Microsoft Windows WER Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows WER. An attacker could...

Remote Code Execution Vulnerability in Lilin NVR104 NTP Component

NVR104 is a stand-alone NVR recorder from LILING that supports up to 4 IP network cameras. A remote code execution vulnerability exists in the Lilin NVR104. An attacker can exploit the vulnerability to gain control of the NVR device...

Base3D Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory. An attacker who successfully exploited the vulnerability would gain execution on a victim system. The security update addresses the vulnerability by correcting how the Base3D rendering engine...

Metinfo SQL Injection (CVE-2020-20800)

An SQL injection vulnerability exists in Metinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

EUVD-2020-12209

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially...