Moderate: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: golang: net/http: improper sanitization of Transfer-Encoding header...

XSS Vulnerability in Wi-Fi6 Router of Sichuan Tianyi Kanghe Communication Co.

Based on the optical communication industry and mobile communication industry, Sichuan Tianyi Kanghe Communication Co., Ltd. has long been committed to the research and development, production, sales and service of communication equipment related products, specializing in the research and...

Wuhan Damon Database Co., Ltd. Damon database management system has a logic flaw vulnerability

Damon database management system is a high-performance database management system with completely independent intellectual property rights launched by Damon, referred to as DM. Wuhan Damon Database Co. Damon Database Management System suffers from a logic flaw vulnerability that can be exploited ...

Weak Password Vulnerability in Tianqing Application Delivery Control System of Qixing Information Technology Group Co.

Tianqing Application Delivery Control System is equipped with virtualized cloud computing center traffic management solution. A weak password vulnerability exists in the Tianqing Application Delivery Control System of Qixing Information Technology Group Corporation, which can be exploited by...

File Upload Vulnerability in Huatian Power OA System (CNVD-2022-83472)

Huatian Power OA system is a collaborative office software developed by Dalian Huatian Software Co. A file upload vulnerability exists in the Huatian Power OA system, which can be exploited by an attacker to upload arbitrary files...

Denial of Service Vulnerability in Configuration King (CNVD-2022-83556)

Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in Configuration King, which can be exploited by an attacker to cause a process crash...

Denial of Service Vulnerability in Configuration King (CNVD-2022-78794)

Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in Configuration King, which can be exploited by an attacker to cause a process crash...

Command Execution Vulnerability in the IT Operation and Maintenance Management System of Shenzhen Fei Si Anuo Network Technology Co Ltd (CNVD-2022-71978)

Ltd. FSANO for short is the first manufacturer in China to independently develop, produce and sell hardware-based IT overall operation and maintenance products, and is the advocate and leader of IT overall operation and cloud operation and maintenance platform in China. A command execution...

Huatian Power OA suffers from XML Entity Injection Vulnerability

Huatian Power OA belongs to Dalian Huatian Software Co., Ltd. and is collaborative office software OA. An XML entity injection vulnerability exists in Huatian Power OA, which can be exploited by attackers to obtain sensitive information...

GHSA-WHPX-Q3RQ-W8JC Hardening of TypedArrays with non-canonical numeric property names in SES

Impact What kind of vulnerability is it? Who is impacted? In Hardened JavaScript, programs can harden objects to safely share objects with co-tenant programs without risk of these other programs tampering with their API surface. Hardening does not guarantee that objects are pure or immutable, so ...

Hardening of TypedArrays with non-canonical numeric property names in SES

Impact What kind of vulnerability is it? Who is impacted? In Hardened JavaScript, programs can harden objects to safely share objects with co-tenant programs without risk of these other programs tampering with their API surface. Hardening does not guarantee that objects are pure or immutable, so ...

File Upload Vulnerability in Huatian Power Collaboration Office System

Dalian Huatian Software Co., Ltd. is a high-tech enterprise organized in accordance with the international advanced management mode and system, and is a collaborative management software company known for its leading technology. A file upload vulnerability exists in Huatian Power Collaboration...

CVE-2021-3305

Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability...

Weak password vulnerability in Tianqing Hanma USG of Qixing Information Technology Group Co.

Tianqing Hanma USG is a new firewall series product officially launched by Qixing. The Tianqing Hanma USG of Qixing Information Technology Group Co., Ltd. suffers from a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

co-ffice.com Cross Site Scripting vulnerability OBB-2970914

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Logic Flaw Vulnerability in TY-6201A of Sichuan Tianyi Kanghe Communication Co.

The TY-6201A is a cost-effective full-band Wi-Fi6-enabled wireless router. A logic flaw vulnerability exists in the TY-6201A of Sichuan Tianyi Kanghe Communication Company Limited, which can be exploited by an attacker to change a password without permission via a POST request for a specific path...

Information Disclosure Vulnerability in TY-6201A of Sichuan Tianyi Kanghe Communication Co.

The TY-6201A is a cost-effective full-band Wi-Fi6-enabled wireless router. An information disclosure vulnerability exists in the TY-6201A of Sichuan Tianyi Kanghe Communication Co. which can be exploited by attackers to obtain sensitive information...

File Download Vulnerability in EWEB Network Management System of Beijing StarNet Ruijie Network Technology Co.

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A file download vulnerability exists in the EWEB network management system of Beijing StarN...

CVE-2022-38532

Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component CFeatures of MSI.CentralServer.exe. This vulnerability allows attackers to escalate privileges via running a crafted executable...

CVE-2022-38532

Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component CFeatures of MSI.CentralServer.exe. This vulnerability allows attackers to escalate privileges via running a crafted executable...