Anhui Siwatu Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Hefei Siwatu network technology limited liability company is mainly engaged in software development, computer graphics production, network cabling, computer installation and maintenance, website production, maintenance, promotion, graphic design, domain name service. Anhui Siwatu Network Technolo...

SQL injection vulnerability in Wuhan Jinglun website building system

Wuhan Jinglun Technology Development Co., Ltd. specializes in website construction and collaborative office software development. There is a SQL injection vulnerability in the website building system of Wuhan Jinglun Technology Development Co. Attackers can utilize the vulnerability to obtain...

Unauthorized Access Vulnerability in ASRock DAYS Disaster Recovery Software

ASRock DAYS disaster recovery software belongs to DAYS series of optional products, which integrates disaster recovery, fault tolerance, backup and query functions, and provides one-stack infrastructure, the same disaster recovery management, elasticity, multi-layer data protection, smooth...

Weak Password Vulnerability in Large Practice Series Instructional Management System

Kok Jin Information Technology Co., Ltd. is a domestic educational software and informationization service provider. A weak password vulnerability exists in the Great Practice Series Teaching Management System. An attacker can obtain sensitive information by blasting the login account...

Binary vulnerability between Xiaomi Xiao Ai MINI smart speaker, Xiaomi Xiao Ai AI smart speaker voice devices

Xiaomi Xiao Ai MINI Smart Speaker and Xiaomi Xiao Ai AI Smart Speaker are both smart speaker products from Xiaomi Technology. A binary vulnerability exists between the Xiaomi Xiao-ai MINI Smart Speaker and Xiaomi Xiao-ai AI Smart Speaker voice devices, which can be exploited by an attacker to...

iChain Insurance Wallet App for iOS Directory Traversal Vulnerability

iChain Insurance Wallet App for iOS is an e-wallet application based on the iOS platform. A directory traversal vulnerability exists in iChain Insurance Wallet App for iOS. A remote attacker can gain access to arbitrary files, such as those associated with an application on an iOS device...

SAP Business One Mobile App for Android Information Disclosure Vulnerability

SAP Business One Mobile App for Android is an Android-based enterprise resource planning application from SAP, Germany. The program includes business management, customer management and sales management. An information disclosure vulnerability exists in version 1.2.12 of the SAP Business One Mobi...

Microsoft Edge and ChakraCore Information Disclosure Vulnerability (CNVD-2019-42799)

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge and ChakraCore. The vulnerability can be exploited by an attacker to obtain information to further...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2019-16193)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Windows kernel is one of the Windows system kernels. An information disclosure vulnerability exists in the Microsoft Windows kernel, which arises from a program's failure to properly...

imcat Information Disclosure Vulnerability (CNVD-2019-00971)

imcat is a PHP-based open source website building system . A security vulnerability exists in imcat version 4.4. Remote attackers can use root/tools/adbug/binfo.php?phpinfo1 URI to obtain information...

Weak Password Vulnerability in Chengdu Zhihui Campus Security Payment Platform

Campus Secure Payment Platform is an internet and mobile internet financial application platform for domestic universities. A weak password vulnerability exists in the Campus Pay platform. An attacker can exploit the vulnerability to obtain sensitive information and also perform unauthorized...

SQL Injection Vulnerability in seacms

seacms is a video-on-demand content management system designed for different needs. A SQL injection vulnerability exists in seacms. An attacker can exploit the vulnerability to obtain sensitive database information...

Dell EMC NetWorker Clear-Text Authentication Vulnerability

Dell EMC NetWorker is a suite of unified backup and recovery software from Dell USA. The software provides backup and recovery, deduplication elimination, backup reporting and other features. A Clear-Text authentication vulnerability exists in Dell EMC NetWorker, where user credentials are sent i...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-12881)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from an information disclosure vulnerability. The vulnerability stems from Microsoft Edge failing to properly handle objects in memory. An attacker could exploit the vulnerability to obtain information that could further compromis...

CVE-2016-0300

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 might allow remote attackers to access arbitrary JSP pages via vectors related to improper input validation. IBM X-Force ID: 111412...

Pink Diary App has information leakage vulnerability

Powder Diary App is a life multi-functional recording tool App. Pink Diary APP has information leakage vulnerability, attackers can obtain sensitive information by searching keywords...

Shaanxi Public Software Co., Ltd. website building system has SQL injection vulnerabilities in multiple parameters

Ltd. has been focusing on the promotion and application of industry informatization construction and management technology, and is a modern high-tech enterprise integrating industry informatization system, development of professional software and technical training service. Shaanxi public softwar...

Lenovo Connect2 Information Disclosure Vulnerability

Lenovo Connect2 is a free management tool for transferring content between computers and cell phones from the Chinese company Lenovo. A security vulnerability exists in Lenovo Connect2 that stems from the program storing ad-hoc connection passwords in a user-readable location. An attacker could u...

Google Android framework information disclosure vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Framework is a component. An information disclosure vulnerability exists in Framework in Android. An attacker can exploit this vulnerability to gain access to downloaded...

Huawei UMA Product Information Disclosure Vulnerability (CNVD-2017-12923)

Huawei Unified Maintenance Audit UMA is a unified IT core resource operation and maintenance management and security audit platform designed for carriers, government, finance, electric power and large enterprises. Huawei UMA products have information leakage vulnerabilities, which can be exploite...