Command Execution Vulnerability in the Operation and Maintenance Audit System of Beijing COSCO Kirin Technology Co. Ltd (CNVD-2022-53245)

COSCO KyLin Technology Co., Ltd. is a R&D-oriented software development company, the company's main products are COSCO KyLin Barrier Machine, KyLin SSL VPN, KyLin Dynamic Password System, KyLin Cloud Desktop and so on. Our main products are COSCO Kirin SSL VPN, Kirin Dynamic Password System, Kiri...

Weak Password Vulnerability in Black Shield Network Security Audit System

Fujian Strait Information Technology Co., Ltd. is a state-controlled high-tech enterprises, specializing in network security technology field of technical research, product sales, information security services and other businesses. A weak password vulnerability exists in the Black Shield Network...

Weak password vulnerability in SAS security audit system

SAS Security Audit System is a fortress developed by Green Alliance Technology. SAS Security Audit System has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in RG-UAC Ruijie Unified Internet Behavior Management and Auditing System

Ruijie Unified Internet Behavior Management and Auditing System is an Internet behavior management and auditing product independently developed by Ruijie Networks. The RG-UAC Unified Internet Behavior Management and Audit System has a SQL injection vulnerability, which can be exploited by an...

Command Execution Vulnerability in the Operation and Maintenance Audit System of Beijing COSCO Kirin Technology Co.

Beijing COSCO KyLin Technology Co., Ltd. is a software development company mainly focusing on R&D. The main products of the company are COSCO KyLin Barrier Machine, KyLin SSL VPN, KyLin Dynamic Password System, KyLin Cloud Desktop and so on. A command execution vulnerability exists in the operati...

Command Execution Vulnerability in RG-UAC Ruijie Unified Online Behavior Management and Audit System

The RG-UAC Ruijie Unified Online Behavior Management and Audit System has a command execution vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in SecFox Security Audit System

SecFox Security Audit System is a security audit system of NetShen Information Technology Beijing Co. A file upload vulnerability exists in SecFox Security Audit System, which can be exploited by attackers to gain control of the server...

Information Disclosure Vulnerability in Built-in Reports of Renzi Network Security Audit System

Ltd. is the most comprehensive provider of large-scale cyberspace security protection solutions in China. There is an information leakage vulnerability in the built-in report of Renzihang Network Security Audit System, which can be exploited by an attacker to obtain the login password and log int...

Unauthorized Access Vulnerability in the Operations and Maintenance Audit System of Xinhua San Technologies Co.

Xinhua San Technology Co., Ltd. is committed to becoming the most reliable partner for customers' business innovation and digital transformation. The main products are routers, big data, switches, IoT, cloud computing, servers and so on. An unauthorized access vulnerability exists in the Operatio...

Command Execution Vulnerability in Renzihang Cloud Ops Security Audit System

RENZHOU Cloud O&M Security Audit System is a powerful support platform for enterprise and public utility IT systems' internal pre-prevention, mid-monitoring, and post-auditing. A command execution vulnerability exists in RENZIHANG Cloud O&M Security Audit System, which can be exploited by attacke...

SQL Injection Vulnerability in Budget Instant Audit System of Beijing Zhongke Shangxin Technology Co.

Ltd. is the pioneer of comprehensive budget informatization solution for domestic enterprises, creating enterprise financial management platform software and mobile reimbursement bill of lading. A SQL injection vulnerability exists in the Budget Instant Audit System of Beijing Zhongke Shangxin...

LOGBASE Operations Security Management System suffers from weak password vulnerability

LogBase O&M Security Management System is a new generation of operational behavior management security audit system. A weak password vulnerability exists in the LOGBASE Operations and Maintenance Security Management System. The vulnerability is due to the system is not set up for the first login ...

Weak Password Vulnerability in Wheaton's Network Security Audit System

Shenzhen Wheaton Information Technology Co., Ltd. is committed to providing the government, enterprises and institutions with eDigital Remote Application Centralized Access Solution, eDigital VPN Secure Interconnection Solution, eDigital Core Data Security Protection Solution, eDigital Applicatio...

Weak Password Vulnerability in NetSense SecFox Security Audit System

SecFox Security Audit System is a security audit system of NetShen Information Technology Beijing Co. A weak password vulnerability exists in NetShen SecFox Security Audit System, which can be exploited by attackers to obtain sensitive information...

HGiga MailSherlock SQL Injection Vulnerability (CNVD-2021-25618)

Hgiga MailSherlock is a set of enterprise mail audit system from Henderson Hgiga, China. HGiga MailSherlock suffers from a SQL injection vulnerability, which stems from the lack of validation of externally entered SQL statements in database-based applications, and can be exploited by an attacker ...

kernel: bad kfree in auditfilter.c may lead to escalation of privilege

A flaw was found in the Linux kernel. A logic error in auditdatatoentry can lead to a local escalation of privilege without user interaction needed. A local attacker with special user privilege could crash the system leading to information leak. The highest threat from this vulnerability is to da...

Weak Password Vulnerability in NetGuard Network Audit System V3.0 of Beijing NetGuard Nebula Information Technology Co.

Netnifty Network Audit System Operation and Maintenance Security Control Type is one of Netnifty's comprehensive internal control series products. It is a compliance control system that controls and audits user operation and maintenance operations in the business environment. Netnifty Network Aud...

SecFox Security Audit System V5 suffers from Arbitrary File Download Vulnerability

SecFox Security Audit System V5 is a security audit system. SecFox Security Audit System V5 suffers from an arbitrary file download vulnerability. An attacker can exploit the vulnerability to download arbitrary files...

Microsoft Windows: Audit System Integrity

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsystemintegrity.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit System Integrity Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

NetSense SecFox Security Audit System suffers from s2-045 Remote Command Execution Vulnerability

SecFox Security Audit System is a security audit system of NetShen Information Technology Co. NetShen SecFox Security Audit System suffers from a s2-045 remote command execution vulnerability. It allows an attacker to perform command execution and gain server privileges by adding a payload when...