CVE-2021-37213 Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-2

The check-in record page of Flygo contains Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record...

CVE-2021-37211 Larvata Digital Technology Co. Ltd. FLYGO - Stored XSS

The bulletin function of Flygo does not filter special characters while a new announcement is added. Remoter attackers can use the vulnerability with general user’s credential to inject JavaScript and execute stored XSS attacks...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Distribution Platform of Sichuang Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the flash flood monitoring and early warning distribution platform of Siltronic, which can be exploited by attackers to obtain sensitive information from th...

Weak Password Vulnerability in Black Shield Network Security Audit System

Fujian Strait Information Technology Co., Ltd. is a state-controlled high-tech enterprises, specializing in network security technology field of technical research, product sales, information security services and other businesses. A weak password vulnerability exists in the Black Shield Network...

S-CMS Cross-Site Scripting Vulnerability (CNVD-2021-58259)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. /app/formadd/ in S-CMS 3.0 has a stored cross-site scripting vulnerability that can be exploited to execute arbitrary Web scripts or HTML via the title entry text bo...

S-CMS Remote Code Execution Vulnerability (CNVD-2021-94956)

S-CMS is a product developed by Zibo Shining Network Technology Co., Ltd. that provides solutions for building enterprise websites. a remote code execution vulnerability exists in /1.com.php in S-CMS version 3.0 PHP version. An attacker can exploit the vulnerability by modifying PHP files to get ...

Command Execution Vulnerability in Free Fiction Software

The free novel software is a full range of free listening and reading tools developed by KDDI, focusing on online novel apps. Free Novel Software suffers from a command execution vulnerability that can be exploited by an attacker to gain server control privileges...

Unspecified vulnerability in DEPSTECH WiFi Digital Microscope

DEPSTECH WiFi Digital Microscope is a wifi industrial endoscope from Shenzhen Shenhai Innovation Technology Co., Ltd. in China. DEPSTECH WiFi Digital Microscope 3 has a security vulnerability that allows remote attackers to change the SSID and password and demand a ransom from the legitimate devi...

SQL Injection Vulnerability in Tongda OA Version 11.10 Server Side

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Unspecified vulnerability in DEPSTECH WiFi Digital Microscope (CNVD-2021-60544)

DEPSTECH WiFi Digital Microscope is a wifi industrial endoscope from Shenzhen Shenhai Innovation Technology Co., Ltd. in China. DEPSTECH WiFi Digital Microscope 3 has a security vulnerability that could be exploited by attackers to gain access to sensitive information...

Binary Vulnerability in WPS Pictures of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-56429)

WPS Photo is a photo processing software. A binary vulnerability exists in WPS Picture of Zhuhai Kingsoft Office Software Limited, which can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in the Website Building System of Jereh Information Business Limited

Jereh Information Business Limited is a company that has completed thousands of corporate websites, e-commerce websites, event websites, as well as a variety of function-specific programs and apps for thousands of companies and organizations. A SQL injection vulnerability exists in the website...

Weak Password Vulnerability in Network Video Server of Shenzhen Longchamp Xintron Technology Co. Ltd (CNVD-2021-54075)

Ltd. is a leading provider of intelligent inspection robots and intelligent infrared thermal imaging products and solutions in China. Ltd. Network Video Server has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in the Enterprise Process Control System of Beijing Space and Time Zhiyou Technology Co.

Ltd. is a company whose business scope includes technology development, technology promotion, technology transfer, technology consulting, technology service and so on. There is an unauthorized access vulnerability in the enterprise process control system of Beijing Space Time Zhiyou Technology Co...

Binary vulnerability in DocuCom pdf reader (CNVD-2021-54060)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Binary vulnerability in DocuCom pdf reader (CNVD-2021-54059)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in Tongxin Mobile App

Guangzhou Tongxin Technology Co., Ltd. is a high-tech joint-stock company specializing in human resources management system, eHR/OA integrated wisdom cloud platform, smart card cloud platform, industry software development and customization, intelligent enterprise management information technolog...

XSS Vulnerability in the Transportation Management Cloud Platform of Shanghai BuBuYiBai Technology Co.

Ltd. is a high-tech enterprise providing information system for domestic small and medium-sized logistics. Shanghai BBYB Technology Co., Ltd. has an XSS vulnerability in its transportation management cloud platform, which can be exploited by attackers to obtain sensitive information such as user...

Binary vulnerability in DocuCom pdf reader (CNVD-2021-54058)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in Qilai OA Cl***.aspx File

Xi'an Huatian Synergy Information Technology Co., Ltd. is a company whose business scope includes: sales of computer software and hardware, computer network engineering, design of security monitoring engineering, etc.. A SQL injection vulnerability exists in the Qilai OA Cl.aspx file, which can b...