Lucene search
+L

64 matches found

CNVD
CNVD
added 2020/05/20 12:0 a.m.1 views

SQL injection vulnerability exists in kkcms (CNVD-2020-33114)

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information database...

7.7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.10 views

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor allows a hacker to gain access to confidential data after it is released. This enables the hacker to compromise the integrity of those data and cause service failures.

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS6.7AI score0.04104EPSS
Exploits1References14Affected Software8
CNVD
CNVD
added 2020/04/09 12:0 a.m.3 views

Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-31269)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to gain access to information...

5.3CVSS7AI score0.0034EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/04 12:0 a.m.2 views

SQL Injection Vulnerability in Longmen Technology Website Building System

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. There is a SQL injection vulnerability in the website building system of LongmenTech, which can be exploited by attackers to obtain...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/03/19 12:0 a.m.4 views

SQL Injection Vulnerability in Nanning Conductor Network Technology Co.

Nanning conduction network technology limited liability company is a company specializing in the development of Internet products. Nanning conduction network technology limited liability company building system there is a SQL injection vulnerability, attackers can use the vulnerability to obtain...

7.5AI score
Exploits0
CNVD
CNVD
added 2020/02/24 12:0 a.m.3 views

Yantai Cloud Pulse Network Technology Co., Ltd. SQL injection vulnerability exists in Cloud Pulse Network website building system

Yantai cloud pulse network technology limited company cloud pulse network for brands to provide network station building services. There is a SQL injection vulnerability in the Yantai Cloud Vein Network Technology Co., Ltd. website builder system that can be exploited by attackers to obtain...

7.6AI score
Exploits0
CNVD
CNVD
added 2020/02/20 12:0 a.m.2 views

PHPEMS suffers from an information leakage vulnerability

PHPEMS PHP Exam Management System online mock exam system based on PHP + Mysql development, support for a variety of types of questions and presentation, is the first to support the question of the question and hand automatic one of the scoring of the PHP online mock exam system. PHPEMS has...

6.7AI score
Exploits0
CNVD
CNVD
added 2019/11/18 12:0 a.m.3 views

JetBrains TeamCity Information Disclosure Vulnerability (CNVD-2019-41879)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...

4.9CVSS6.3AI score0.01076EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/25 12:0 a.m.2 views

Anhui Siwatu Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Hefei Siwatu network technology limited liability company is mainly engaged in software development, computer graphics production, network cabling, computer installation and maintenance, website production, maintenance, promotion, graphic design, domain name service. Anhui Siwatu Network Technolo...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/08/17 12:0 a.m.2 views

SQL injection vulnerability in Wuhan Jinglun website building system

Wuhan Jinglun Technology Development Co., Ltd. specializes in website construction and collaborative office software development. There is a SQL injection vulnerability in the website building system of Wuhan Jinglun Technology Development Co. Attackers can utilize the vulnerability to obtain...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/02/15 12:0 a.m.5 views

SAP Business One Mobile App for Android Information Disclosure Vulnerability

SAP Business One Mobile App for Android is an Android-based enterprise resource planning application from SAP, Germany. The program includes business management, customer management and sales management. An information disclosure vulnerability exists in version 1.2.12 of the SAP Business One Mobi...

5.5CVSS6.2AI score0.00387EPSS
Exploits0References1
CNVD
CNVD
added 2018/12/10 12:0 a.m.6 views

Weak Password Vulnerability in Chengdu Zhihui Campus Security Payment Platform

Campus Secure Payment Platform is an internet and mobile internet financial application platform for domestic universities. A weak password vulnerability exists in the Campus Pay platform. An attacker can exploit the vulnerability to obtain sensitive information and also perform unauthorized...

6.7AI score
Exploits0
CNVD
CNVD
added 2018/08/09 12:0 a.m.2 views

SQL Injection Vulnerability in seacms

seacms is a video-on-demand content management system designed for different needs. A SQL injection vulnerability exists in seacms. An attacker can exploit the vulnerability to obtain sensitive database information...

7.9AI score
Exploits0
CNVD
CNVD
added 2018/07/11 12:0 a.m.4 views

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-12881)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from an information disclosure vulnerability. The vulnerability stems from Microsoft Edge failing to properly handle objects in memory. An attacker could exploit the vulnerability to obtain information that could further compromis...

4.3CVSS4.3AI score0.09349EPSS
Exploits0References1
CNVD
CNVD
added 2017/11/28 12:0 a.m.2 views

Pink Diary App has information leakage vulnerability

Powder Diary App is a life multi-functional recording tool App. Pink Diary APP has information leakage vulnerability, attackers can obtain sensitive information by searching keywords...

6.6AI score
Exploits0
CNVD
CNVD
added 2017/11/24 12:0 a.m.3 views

Shaanxi Public Software Co., Ltd. website building system has SQL injection vulnerabilities in multiple parameters

Ltd. has been focusing on the promotion and application of industry informatization construction and management technology, and is a modern high-tech enterprise integrating industry informatization system, development of professional software and technical training service. Shaanxi public softwar...

7.6AI score
Exploits0
CNVD
CNVD
added 2017/07/18 12:0 a.m.5 views

Lenovo Connect2 Information Disclosure Vulnerability

Lenovo Connect2 is a free management tool for transferring content between computers and cell phones from the Chinese company Lenovo. A security vulnerability exists in Lenovo Connect2 that stems from the program storing ad-hoc connection passwords in a user-readable location. An attacker could u...

4.8CVSS5.1AI score0.00483EPSS
Exploits0References1
CNVD
CNVD
added 2017/04/18 12:0 a.m.5 views

Google Nexus Qualcomm TrustZone Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm TrustZone is a system-wide security technology. An information disclosure vulnerability exists in Google Nexus Qualcomm TrustZone. An attacker could exploit this...

5.5CVSS6.1AI score0.01005EPSS
Exploits0References1
CNVD
CNVD
added 2017/02/10 12:0 a.m.25 views

Calibre Local Information Disclosure Vulnerability

Calibre is an open source eBook management application. A local information disclosure vulnerability exists in Calibre. An attacker could exploit this vulnerability to access sensitive information and launch further attacks...

5.5CVSS5.2AI score0.02793EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.8 views

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Flash Player allows attackers to execute arbitrary code or cause a service failure a memory corruption error...

10CVSS6.1AI score0.05803EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder