CVE-2020-12526

Affected software: Beckhoff TwinCAT OPC UA Server (versions up to 2.3.0.12) and IPC Diagnostics UA Server (versions up to 3.1.0.1). Issue: denial-of-service vulnerability where several specially crafted requests to the running OPC UA server can cause the server to stop responding to any client, w...

JVN#13076220: RFNTPS vulnerable to OS command injection

RFNTPS provided by NIPPON ANTENNA Co.,Ltd. is a terrestrial reception type NTP server. RFNTPS contains an OS command injection vulnerability CWE-78. Impact A user on the same LAN who can access the product may execute an arbitrary OS command with root privilege. Solution Update the Firmware Updat...

SQL Injection Vulnerability in Jiangsu Wo Ye Software Co.

Jiangsu Wo Ye Software Co., Ltd. focuses on auditing, housing construction, transportation, municipal, seven-color sheep and office automation and other engineering projects throughout the process of management of big data information platform development, engaged in intelligent government cloud...

Command Execution Vulnerability in NETSYS

Founded in 2004, Shenzhen Domain Technology Co., Ltd. is a national high-tech enterprise specializing in the research and development, production, sales and service of products in the field of network information security. NETSYS has a command execution vulnerability that can be exploited by an...

Unauthorized Access Vulnerability in Website Building System of Beijing Qingliu Technology Co.

Beijing Clearstream Technology Co., Ltd. is China's leading total solution provider of intelligent water services. An unauthorized access vulnerability exists in the website building system of Beijing Qingliu Technology Co. An attacker can exploit the vulnerability to obtain sensitive information...

Command Execution Vulnerability in CPE-WiFi of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi of Shenzhen Sidetech Co., Ltd. has a command execution vulnerability that can be exploited by attackers to execute system commands...

Weak password vulnerability in TOPSEC TOS WEB ADMINISTRATOR of Beijing Tianrongxin Technology Co.

Beijing Tianrongxin Technology Co., Ltd. is a leading provider of network security, big data and cloud services in China. A weak password vulnerability exists in TOPSEC TOS WEB ADMINISTRATOR of Beijing Tianrongxin Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Logic Flaw Vulnerability in Zhengfang Teaching Management System of Zhengfang Software Co.

Based on the main line of cultivation, operation, guarantee and monitoring, the Zhengfang Academic Affairs Management System realizes the superposition of transactional management and strategic management of academic affairs, and meets the strategic needs of the school's cultivation process...

Unauthorized Access Vulnerability in Multiple Systems of Xi'an Aofeng Software Co.

Ltd. is located in Xi'an Software Park, a member subsidiary of Jaisei, is a high-tech enterprise specializing in gas industry informatization construction, with more than 10 years of experience in gas industry informatization construction. Xi'an Aofeng Software Co., Ltd. has unauthorized access...

File Upload Vulnerability in Website Building System of Shandong Guozi Software Co.

Shandong Guozi Software Co., Ltd. is a professional application software product development and industry solution provider. A file upload vulnerability exists in the website builder system of Shandong Guozi Software Co. Ltd, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in NS-NGFW Next Generation Firewall of Beijing Netcom Technology Co.

NS-NGFW is a high-performance application layer firewall that can comprehensively deal with network threats. A command execution vulnerability exists in NS-NGFW, which can be exploited by an attacker to gain server control privileges...

SQL Injection Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.

Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. A SQL injection vulnerability exists in the Employment Information Management System of...

File Upload Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.

Anhui Kexun Education Equipment Co., Ltd. is a professional information technology integrated service provider specializing in computer software research and development, sales and service. A file upload vulnerability exists in the Digital Campus Integrated Management System of Anhui Kexun...

SQL Injection Vulnerability in Lotus Commercial Concrete Management Software of Hangzhou Lotus Software Co.

Hangzhou Lotus Software Co., Ltd, was registered in Hangzhou on 2004-01-07, belongs to the software and information technology services industry, the main industry is software and information technology services industry, the number of employees 5 people, the registered capital of 1 million yuan...

Anhui Xufan Information Technology Co., Ltd. EASYGBS exists logic flaw vulnerability

Anhui Xufan Information Technology Co., Ltd. was established on August 11, 2014 . Legal representative Cai Kunsong, the company's scope of business includes: computer hardware and software development and sales, technical services, technical consulting, technology transfer; web page design; netwo...

SQL Injection Vulnerability in the Website Building System of Beijing Bolehoo Technology Co. Ltd (CNVD-2021-26012)

Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. There is a SQL injection vulnerability in the website builder system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to obtain...

Weak password vulnerability in NR285P of Shenzhen Leike Industry Co.

The NR285P is a customized router for medium-sized businesses and the education industry. Shenzhen Leike Industry Co. Ltd NR285P has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in NR208 of Shenzhen Leike Industry Co.

NR218 is a router from Shenzhen Leike Industrial Co. Shenzhen Leike Industrial Co., Ltd NR208 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in SongCMS PHP Version of Guangdong Kegel Technology Co.

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A SQL injection vulnerability exists in the PHP version of SongCMS by Guangdong Kager...

Command Execution Vulnerability in SongCMS PHP Version of Guangdong Kegel Technology Co.

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the PHP version of SongCMS by Guangdong Kege...