Logic Flaw Vulnerability in Her Money App (CNVD-2023-94870)

She Wealth Management App is a safe and reliable mobile financial software. She Wealth Management APP has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

Apache HTTP Server Buffer Overflow Vulnerability (CNVD-2023-93320)

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A buffer overflow vulnerability exists in Apache HTTP Server 2.4.57 and earlier versions, which stems from an out-of-bounds read...

IBM TXSeries for Multiplatforms Resource Management Error Vulnerability

IBM TXSeries for Multiplatforms is a transaction monitoring and management software product from International Business Machines IBM designed to support distributed transaction processing on multiple platforms. A resource management error vulnerability exists in IBM TXSeries for Multiplatforms...

PortlandLabs Concrete CMS Cross-Site Scripting Vulnerability

PortlandLabs Concrete CMS is a team-oriented open source content management system of the United States PortlandLabs company . A cross-site scripting vulnerability exists in PortlandLabs Concrete CMS v.9.2.1, which stems from the lack of effective filtering and escaping of user-supplied data by t...

XSS Vulnerability in PageOffice of Beijing Zhuozheng Zhiyuan Software Co.

PAGEOFFICE is an Internet private cloud OFFICE technology solution independently developed by Zhuozheng Software. PageOffice of Beijing Zhuozheng Zhiyuan Software Co., Ltd. exists XSS vulnerability, attackers can use the vulnerability to obtain sensitive information such as user cookies...

IBM Security Verify Governance Cross-Site Scripting Vulnerability

IBM Security Verify Governance is an identity and access management solution provided by IBM. It is a software system for managing and monitoring user identities, permissions and access. A cross-site scripting vulnerability exists in IBM Security Verify Governance, which can be exploited by an...

Information Disclosure Vulnerability in EG2000SE of Beijing StarNet Ruijie Network Technology Co.

The EG2000SE is a multi-service router. An information disclosure vulnerability exists in the EG2000SE of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Information leakage vulnerability in EG2000SE of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2023-88652)

The EG2000SE is a multi-service router. An information disclosure vulnerability exists in the EG2000SE of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Information leakage vulnerability in EG2000SE of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2023-94098)

EG2000SE is a router product. An information disclosure vulnerability exists in the EG2000SE of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Information leakage vulnerability in EG2000SE of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2023-94096)

EG2000SE is a router product. An information disclosure vulnerability exists in the EG2000SE of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Google Android Information Disclosure Vulnerability (CNVD-2024-07130)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by out-of-bounds reading of multiple functions in protocolemmsadapter.cpp. An attacker can exploit the vulnerability to obtain sensitive...

D-Link DAR-7000 mailrecvview.php File SQL Injection Vulnerability

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A SQL injection vulnerability exists in the D-Link DAR-7000 mailrecvview.php file, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

D-Link DAR-7000 importexport.php file SQL injection vulnerability

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A SQL injection vulnerability exists in the D-Link DAR-7000 importexport.php file. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-18137)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to compromise MySQL Server via network access over multiple protocols...

Unauthorized Access Vulnerability in SpringBlade of Shanghai Bred Technology Co. Ltd (CNVD-2023-94732)

SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. An unauthorized access vulnerability exists in SpringBlade, which can be exploited by an attacker to obtain sensitive information...

The Oracle MySQL Installer has an unknown vulnerability

Oracle MySQL is an open-source relational database management system developed by Oracle Corporation in the United States. The Oracle MySQL Installer is a tool used for managing and installing MySQL software. The Oracle MySQL Installer has a security vulnerability, allowing attackers to log into...

TOTOLINK X5000R and A7000R setParentalRules function stack overflow vulnerability

TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A stack overflow vulnerability exists in the TOTOLINK X5000R and A7000R setParentalRules function, which can be exploited by an attacker to trigger a denial of service DoS via a specially crafted POST request...

TOTOLINK X5000R and A7000R UploadCustomModule Function Stack Overflow Vulnerability

TOTOLINK X5000R is a router.TOTOLINK A7000R is a wireless router. A stack overflow vulnerability exists in the TOTOLINK X5000R and A7000R UploadCustomModule function, which can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...

Information Disclosure Vulnerability in UFIDA UAP System

UFIDA Network Technology Co., Ltd. is a leading global provider of enterprise cloud services and software. An information disclosure vulnerability exists in the UFIDA UAP system, which can be exploited by attackers to obtain sensitive information...

Information leakage vulnerability in the electronic document security management system of Beijing Yisaitong Technology Development Co., Ltd (CNVD-2023-86622)

Beijing Yisetong Technology Development Co., Ltd. is a leading data security business provider in China. An information leakage vulnerability exists in the electronic document security management system of Beijing Yisetong Technology Development Co., Ltd, which can be exploited by attackers to...