2288 matches found
Weak Password Vulnerability in Tianqing Application Delivery Control System of Qixing Information Technology Group Co.
Tianqing Application Delivery Control System is equipped with virtualized cloud computing center traffic management solution. A weak password vulnerability exists in the Tianqing Application Delivery Control System of Qixing Information Technology Group Corporation, which can be exploited by...
Denial of Service Vulnerability in Configuration King (CNVD-2022-83556)
Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in Configuration King, which can be exploited by an attacker to cause a process crash...
File Upload Vulnerability in Huatian Power OA System (CNVD-2022-83472)
Huatian Power OA system is a collaborative office software developed by Dalian Huatian Software Co. A file upload vulnerability exists in the Huatian Power OA system, which can be exploited by an attacker to upload arbitrary files...
Denial of Service Vulnerability in Configuration King (CNVD-2022-78794)
Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in Configuration King, which can be exploited by an attacker to cause a process crash...
Command Execution Vulnerability in the IT Operation and Maintenance Management System of Shenzhen Fei Si Anuo Network Technology Co Ltd (CNVD-2022-71978)
Ltd. FSANO for short is the first manufacturer in China to independently develop, produce and sell hardware-based IT overall operation and maintenance products, and is the advocate and leader of IT overall operation and cloud operation and maintenance platform in China. A command execution...
Huatian Power OA suffers from XML Entity Injection Vulnerability
Huatian Power OA belongs to Dalian Huatian Software Co., Ltd. and is collaborative office software OA. An XML entity injection vulnerability exists in Huatian Power OA, which can be exploited by attackers to obtain sensitive information...
Hardening of TypedArrays with non-canonical numeric property names in SES
Impact What kind of vulnerability is it? Who is impacted? In Hardened JavaScript, programs can harden objects to safely share objects with co-tenant programs without risk of these other programs tampering with their API surface. Hardening does not guarantee that objects are pure or immutable, so ...
GHSA-WHPX-Q3RQ-W8JC Hardening of TypedArrays with non-canonical numeric property names in SES
Impact What kind of vulnerability is it? Who is impacted? In Hardened JavaScript, programs can harden objects to safely share objects with co-tenant programs without risk of these other programs tampering with their API surface. Hardening does not guarantee that objects are pure or immutable, so ...
File Upload Vulnerability in Huatian Power Collaboration Office System
Dalian Huatian Software Co., Ltd. is a high-tech enterprise organized in accordance with the international advanced management mode and system, and is a collaborative management software company known for its leading technology. A file upload vulnerability exists in Huatian Power Collaboration...
CVE-2021-3305
Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability...
Weak password vulnerability in Tianqing Hanma USG of Qixing Information Technology Group Co.
Tianqing Hanma USG is a new firewall series product officially launched by Qixing. The Tianqing Hanma USG of Qixing Information Technology Group Co., Ltd. suffers from a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...
co-ffice.com Cross Site Scripting vulnerability OBB-2970914
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Logic Flaw Vulnerability in TY-6201A of Sichuan Tianyi Kanghe Communication Co.
The TY-6201A is a cost-effective full-band Wi-Fi6-enabled wireless router. A logic flaw vulnerability exists in the TY-6201A of Sichuan Tianyi Kanghe Communication Company Limited, which can be exploited by an attacker to change a password without permission via a POST request for a specific path...
Information Disclosure Vulnerability in TY-6201A of Sichuan Tianyi Kanghe Communication Co.
The TY-6201A is a cost-effective full-band Wi-Fi6-enabled wireless router. An information disclosure vulnerability exists in the TY-6201A of Sichuan Tianyi Kanghe Communication Co. which can be exploited by attackers to obtain sensitive information...
File Download Vulnerability in EWEB Network Management System of Beijing StarNet Ruijie Network Technology Co.
Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A file download vulnerability exists in the EWEB network management system of Beijing StarN...
CVE-2022-38532
Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component CFeatures of MSI.CentralServer.exe. This vulnerability allows attackers to escalate privileges via running a crafted executable...
CVE-2022-38532
Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component CFeatures of MSI.CentralServer.exe. This vulnerability allows attackers to escalate privileges via running a crafted executable...
Shenzhen Lanning Software Co., Ltd. has SQL injection vulnerability in Lanning Intelligent Collaboration Platform
Shenzhen Lailing Software Co., Ltd. is a well-known large platform OA service provider and a leading knowledge management solution provider in China. It is a national high-tech enterprise specializing in knowledge-based consulting, software development, implementation and technical services for...
