Unspecified Vulnerability in JetBrains Code With Me

JetBrains Code With Me is a plug-in application from the Czech company JetBrains that provides code co-editing for the IntelliJ IDE. A security vulnerability exists in JetBrains Code With Me versions prior to 2021.1. An attacker can exploit the vulnerability to open a browser on the host computer...

SQL Injection Vulnerability in qwadmin of Beijing Chave Network Technology Co. Ltd (CNVD-2021-37972)

qwadmin is a backend management system based on thinkphp with aceadmin template. Beijing Chave Network Technology Co. qwadmin has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Weak Password Vulnerability in Various Products of P&T Technology Co.

TL-IPC223 and so on are webcam products of P&L Technology Co. A weak password vulnerability exists in a number of P&L Technologies Ltd. products, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in Howay SW-26242 of Suzhou Hanming Technology Co.

The Howay SW-26242 is a full Gigabit managed POE switch. Howay SW-26242 of Suzhou Hanming Technology Co. Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2020-12526 BECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server

TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of...

CVE-2020-12526

Affected software: Beckhoff TwinCAT OPC UA Server (versions up to 2.3.0.12) and IPC Diagnostics UA Server (versions up to 3.1.0.1). Issue: denial-of-service vulnerability where several specially crafted requests to the running OPC UA server can cause the server to stop responding to any client, w...

JVN#13076220: RFNTPS vulnerable to OS command injection

RFNTPS provided by NIPPON ANTENNA Co.,Ltd. is a terrestrial reception type NTP server. RFNTPS contains an OS command injection vulnerability CWE-78. Impact A user on the same LAN who can access the product may execute an arbitrary OS command with root privilege. Solution Update the Firmware Updat...

SQL Injection Vulnerability in Jiangsu Wo Ye Software Co.

Jiangsu Wo Ye Software Co., Ltd. focuses on auditing, housing construction, transportation, municipal, seven-color sheep and office automation and other engineering projects throughout the process of management of big data information platform development, engaged in intelligent government cloud...

Command Execution Vulnerability in NETSYS

Founded in 2004, Shenzhen Domain Technology Co., Ltd. is a national high-tech enterprise specializing in the research and development, production, sales and service of products in the field of network information security. NETSYS has a command execution vulnerability that can be exploited by an...

Unauthorized Access Vulnerability in Website Building System of Beijing Qingliu Technology Co.

Beijing Clearstream Technology Co., Ltd. is China's leading total solution provider of intelligent water services. An unauthorized access vulnerability exists in the website building system of Beijing Qingliu Technology Co. An attacker can exploit the vulnerability to obtain sensitive information...

Command Execution Vulnerability in CPE-WiFi of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. CPE-WiFi of Shenzhen Sidetech Co., Ltd. has a command execution vulnerability that can be exploited by attackers to execute system commands...

Weak password vulnerability in TOPSEC TOS WEB ADMINISTRATOR of Beijing Tianrongxin Technology Co.

Beijing Tianrongxin Technology Co., Ltd. is a leading provider of network security, big data and cloud services in China. A weak password vulnerability exists in TOPSEC TOS WEB ADMINISTRATOR of Beijing Tianrongxin Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Logic Flaw Vulnerability in Zhengfang Teaching Management System of Zhengfang Software Co.

Based on the main line of cultivation, operation, guarantee and monitoring, the Zhengfang Academic Affairs Management System realizes the superposition of transactional management and strategic management of academic affairs, and meets the strategic needs of the school's cultivation process...

Unauthorized Access Vulnerability in Multiple Systems of Xi'an Aofeng Software Co.

Ltd. is located in Xi'an Software Park, a member subsidiary of Jaisei, is a high-tech enterprise specializing in gas industry informatization construction, with more than 10 years of experience in gas industry informatization construction. Xi'an Aofeng Software Co., Ltd. has unauthorized access...

File Upload Vulnerability in Website Building System of Shandong Guozi Software Co.

Shandong Guozi Software Co., Ltd. is a professional application software product development and industry solution provider. A file upload vulnerability exists in the website builder system of Shandong Guozi Software Co. Ltd, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in NS-NGFW Next Generation Firewall of Beijing Netcom Technology Co.

NS-NGFW is a high-performance application layer firewall that can comprehensively deal with network threats. A command execution vulnerability exists in NS-NGFW, which can be exploited by an attacker to gain server control privileges...

SQL Injection Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.

Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. A SQL injection vulnerability exists in the Employment Information Management System of...

File Upload Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Co.

Anhui Kexun Education Equipment Co., Ltd. is a professional information technology integrated service provider specializing in computer software research and development, sales and service. A file upload vulnerability exists in the Digital Campus Integrated Management System of Anhui Kexun...

SQL Injection Vulnerability in Lotus Commercial Concrete Management Software of Hangzhou Lotus Software Co.

Hangzhou Lotus Software Co., Ltd, was registered in Hangzhou on 2004-01-07, belongs to the software and information technology services industry, the main industry is software and information technology services industry, the number of employees 5 people, the registered capital of 1 million yuan...

Anhui Xufan Information Technology Co., Ltd. EASYGBS exists logic flaw vulnerability

Anhui Xufan Information Technology Co., Ltd. was established on August 11, 2014 . Legal representative Cai Kunsong, the company's scope of business includes: computer hardware and software development and sales, technical services, technical consulting, technology transfer; web page design; netwo...