Unauthorized Access Vulnerability in Homs5.0 Monitoring Center of Beijing Shuoren Times Technology Co.

Homs5.0 monitoring center is a monitoring system platform for high-end system applications developed on the basis of years of monitoring software system platform development accumulation launched by Beijing Shuo Ren Times Technology Co. Beijing Shuoren Times Technology Co., Ltd Homs5.0 monitoring...

SQL Injection Vulnerability in IDH Heat Network Monitoring and Management Platform of Beijing Shuo Ren Times Technology Co.

Beijing Shuoren Times Technology Co., Ltd. is one of the leading high-tech enterprises in the heating industry. Beijing Shuoren Times Technology Co., Ltd. IDH heat network monitoring and management platform there is a SQL injection vulnerability, attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in Pinto Distribution Platform of Guangzhou Pinto Internet Co.

Guangzhou Pinto Internet Co., Ltd. is an Internet company invested and held by Pearl River Shipping Enterprises Co. Ltd. A SQL injection vulnerability exists in the Pinto Distribution Platform of Guangzhou Pinto Internet Limited, which can be exploited by attackers to obtain sensitive information...

CVE-2021-26887

An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...

Unauthorized access vulnerability in the background management system of Nanjing Jiuzhe Software Technology Co.

Nanjing Jiuzhe Software Technology Co., Ltd. is a mobile Internet customized software service provider. There is an unauthorized access vulnerability in the back-end management system of Nanjing Jiuzhe Software Technology Co...

Securing and governing data in a new hybrid work reality

The past year has led to an evolution in not only how we think about work, but more importantly, where work gets done. Arguably, gone are the days that your organization’s data is limited to the protected confines of your corporate network as your people continue to work remotely, return in some...

Extreme PDF Reader suffers from a denial of service vulnerability (CNVD-2021-17329)

Extreme PDF Reader is a simple, small, efficient and effective PDF reader developed by Beijing Haiteng Times Technology Co. Extreme PDF Reader has a denial-of-service vulnerability that can be exploited by attackers to cause the program to crash...

Command Execution Vulnerability in Douxin of Shenzhen Renxin Technology Co.

Douxin is a WeChat open framework developed by Shenzhen Renxin Technology Co. A command execution vulnerability exists in Shenzhen RenWant Technology Limited Douxin, which can be exploited by an attacker to gain control of a web server...

JVN#37417423: Multiple vulnerabilities in SolarView Compact

SolarView Compact provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. Exposure of information through directory listing CWE-548 - CVE-2021-20656 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N| Base Score: 3.5 CVSS v2|...

Weak Password Vulnerability in Jabil Firewall Management System, Jabil SSLVPN Management System, Jabil Website Security Monitoring

Xi'an Jiaotong University Jiepu Network Technology Co., Ltd. is a first-class professional network security products and technology provider in China. Jabil Firewall Management System, Jabil SSLVPN Management System, Jabil Website Security Monitoring has a weak password vulnerability that can be...

CVE-2021-22857 ChanGate EnterPrise Co., Ltd property management system - Directory Traversal

The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily...

CVE-2021-22858 ChanGate EnterPrise Co., Ltd property management system - Broken Authentication

Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions...

Managed Service Provider? Watch This Video to Learn about Autonomous XDR

As managed security service providers, you're always on the lookout for new platforms. One that can generate further business, enables you to scale easily without investing in more human resources and provides that value immediately. In the meanwhile, your clients are constantly demanding more...

ALBA-2021:0550 pcp bug fix and enhancement update

Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance measurements. Its light-weight distributed architecture makes it particularly well-suited to centralized analysis of complex systems. Bug Fixes and...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co. Ltd (CNVD-2021-14897)

Inner Mongolia Hohai Trade Co., Ltd. to enterprises and institutions for the construction of information technology. Mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection...

XSS Vulnerability in the Website Building System of Inner Mongolia Haohai Trading Co.

Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is an XSS vulnerability in the website building system of Inner Mongolia Hohai Trading Co. Attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co. Ltd (CNVD-2021-14898)

Inner Mongolia Hohai Trade Co., Ltd. to enterprises and institutions for the construction of information technology. Mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection...

File Upload Vulnerability in E-office OA Self-service Platform of Shanghai Panmicro Network Technology Co.

E-office OA self-service platform is a professional collaborative OA software for small and medium-sized organizations. A file upload vulnerability exists in the E-office OA self-service platform of Shanghai Panmicro Network Technology Co., Ltd. that can be exploited by an attacker to gain contro...

Memory Corruption Vulnerability in PM Designer of Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer, which can be exploited by attackers to cause the program to crash...

SQL injection vulnerability in ab***.php page of website building system of Guangzhou Chuangke Network Technology Co.

Guangzhou Chuangke Network Technology Co., Ltd. is a business service company that provides customers with marketing website construction, network marketing promotion, website hosting operation, website production, website design, website promotion and maintenance, website SEO optimization, WeCha...