Citrix Systems Citrix ShareFile storage zones Controller path traversal vulnerability (CNVD-2020-41790)

Citrix Systems Citrix ShareFile is a file sharing solution from Citrix Systems. storage zones Controller is one of the storage zone controllers. A path traversal vulnerability exists in Citrix Systems Citrix ShareFile storage zones Controller. An attacker can exploit this vulnerability to access...

Information leakage vulnerability in PbootCMS of Hunan Avant Cloud Network Technology Co.

PbootCMS is an open source and free PHP enterprise web development and construction management system. Hunan Avion Network Technology Co., Ltd PbootCMS has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...

The vulnerability of Google Chrome browsers, related to memory usage after deallocation, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

SQL Injection Vulnerability in yycms

yycms is a movie and television system. yycms suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor allows a hacker to gain access to confidential data after it is released. This enables the hacker to compromise the integrity of those data and cause service failures.

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-31269)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to gain access to information...

SQL Injection Vulnerability in Longmen Technology Website Building System

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. There is a SQL injection vulnerability in the website building system of LongmenTech, which can be exploited by attackers to obtain...

Authentication flaw

An authentication bypass vulnerability is present in the standalone SITS:Vision 9.7.0 component of Tribal SITS in its default configuration, related to unencrypted communications sent by the client each time it is launched. This occurs because the Uniface TLS Driver is not enabled by default. Thi...

Samsung Mobile Device SQL Injection Vulnerability

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A SQL injection vulnerability exists in Samsung mobile devices, which can be exploited by attackers to gain unauthorized access to contact information...

SQL Injection Vulnerability in Nanning Conductor Network Technology Co.

Nanning conduction network technology limited liability company is a company specializing in the development of Internet products. Nanning conduction network technology limited liability company building system there is a SQL injection vulnerability, attackers can use the vulnerability to obtain...

Yantai Cloud Pulse Network Technology Co., Ltd. SQL injection vulnerability exists in Cloud Pulse Network website building system

Yantai cloud pulse network technology limited company cloud pulse network for brands to provide network station building services. There is a SQL injection vulnerability in the Yantai Cloud Vein Network Technology Co., Ltd. website builder system that can be exploited by attackers to obtain...

PHPEMS suffers from an information leakage vulnerability

PHPEMS PHP Exam Management System online mock exam system based on PHP + Mysql development, support for a variety of types of questions and presentation, is the first to support the question of the question and hand automatic one of the scoring of the PHP online mock exam system. PHPEMS has...

The vulnerability of Firefox browser, related to the lack of protection for service data, allows attackers to gain access to confidential information.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

CVE-2014-4859

Integer overflow in the Drive Execution Environment DXE phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restrictions via crafted data...

CVE-2019-15625

A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information...

The vulnerability of the McAfee Advanced Threat Defense software lies in the lack of protection for operational data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the McAfee Advanced Threat Defense security tool lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

CVE-2019-7195

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions...

JetBrains TeamCity Information Disclosure Vulnerability (CNVD-2019-41879)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...

SQL Injection Vulnerability in ab***.php of Ebay's website builder system

Ltd. is a brand of Jinan Dotchuang Network Technology Co., Ltd, which is a professional provider and operator of high-tech network and software technology services in Shandong Province. There is a sql injection vulnerability in ab.php, which can be exploited by attackers to obtain sensitive...

Anhui Siwatu Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Hefei Siwatu network technology limited liability company is mainly engaged in software development, computer graphics production, network cabling, computer installation and maintenance, website production, maintenance, promotion, graphic design, domain name service. Anhui Siwatu Network Technolo...