Pillow Buffer Overflow Vulnerability (CNVD-2021-54028)

Pillow is a Python-based image processing library. A buffer overflow vulnerability exists in Pillow, which stems from the failure of the product's convert.c to validate the security of parameters, and could be exploited to trigger a denial of service or remote code execution by triggering a buffe...

Google Chrome < 91.0.4472.164 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 91.0.4472.164. It is, therefore, affected by multiple vulnerabilities as referenced in the 202107stable-channel-update-for-desktop advisory. - Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed ...

Tale blog has a file read vulnerability

Tale blog is a java development blog system. Tale blog has a file read vulnerability that can be exploited by attackers to obtain sensitive information...

Binary Vulnerability in DocuCom PDF Reader (CNVD-2021-56848)

DocuCom PDF Reader is a powerful PDF file reader. DocuCom PDF Reader has a binary vulnerability that can be exploited by attackers to cause a denial of service...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62478)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Media Foundation in Microsoft...

Unauthorized Access Vulnerability in HIM Basic Platform Management System of Beijing Zhongchuang Vision Technology Co., Ltd (CNVD-2021-56793)

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. An unauthorized access vulnerability exists in the management system of the HIM infrastructure platform of Beijing CCTV Technology Co. Ltd, which can be exploited by attacker...

Binary Vulnerability in DocuCom PDF Reader (CNVD-2021-54055)

DocuCom PDF Reader is a powerful PDF file reader. DocuCom PDF Reader has a binary vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2021-33771

Windows Kernel Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at July 14, 2021 5:35pm UTC reported: Update : Looks like this was used by the exploit brokerage company Candiru along with CVE-2021-31979 to deliver spyware to targeted users, which according to Microsoft’s blog...

Microsoft Crushes 116 Bugs, Three Actively Exploited

Three bugs under active exploit were squashed by Microsoft Tuesday, part of its July security roundup of fixes for Windows, Microsoft Office, SharePoint Server and Exchange Server. In all, Microsoft patched 116 bugs. Twelve bugs are rated critical, 103 rated important and one classified as modera...

Threat Actors are actively exploiting a SolarWinds Zero-Day Vulnerability

THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. A zero-day vulnerability CVE-2021-35211 that impacts the Serv-U Managed File Transfer and Serv-U Secure FTP, is been exploited by multiple threat actors. The PoC of this exploited vulnerability was given to SolarWinds by...

KB5004307: Windows 7 and Windows Server 2008 R2 Security Update (July 2021)

The remote Windows host is missing security update 5004307. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...

CVE-2021-30119

creationtimestamp| type| source ---|---|--- 2021-07-12 12:51:43+00:00| exploited| https://t.me/truesecator/1905 2026-08-14 05:00:22+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f6f77605-ffb8-4279-9cf0-fa12793bb4b7...

CVE-2021-30120

creationtimestamp| type| source ---|---|--- 2021-07-12 12:51:43+00:00| exploited| https://t.me/truesecator/1905 2026-08-14 05:00:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/843ff541-9302-430e-8eb7-fd41b9c1ca1e 2026-08-14 09:10:55+00:00| seen|...

Weak password vulnerability in DH-SD6C82E-GN of Zhejiang Dahua Technology Co.

The DH-SD6C82E-GN is an HD network dome camera. DH-SD6C82E-GN of Zhejiang Dahua Technology Co. Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in NBR2000D of Beijing StarNet Ruijie Network Technology Co.

NBR1500D is an enterprise router from Beijing StarNet Ruijie Network Technology Co. A command execution vulnerability exists in the NBR2000D of Beijing StarNet Ruijie Network Technology Co. that can be exploited by an attacker to execute commands...

Unauthorized Access Vulnerability in Network Camera WV-SFV311 at Panasonic (China) Co.

Network Camera WV-SFV311 is a network camera. An unauthorized access vulnerability exists in the Network Camera WV-SFV311 of Panasonic China Co. that can be exploited by an attacker to obtain sensitive information...

Unauthorized access vulnerability in Tenda routers (CNVD-2021-51496)

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Unauthorized access vulnerability exists in Tenda routers, which can be exploited by attackers to obtain sensitive information...

CVE-2021-30116

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

QSAN SANOS and QSAN XEVO Command Injection Vulnerability

QSAN SANOS and QSAN XEVO are both products of QSAN China. QSAN SANOS is a SAN storage management operating system. It comes with a refreshingly easy-to-use Web GUI and can be easily deployed to any infrastructure.QSAN XEVO is a flash data management system. It reduces repetitive tasks and provide...

Command Execution Vulnerability in TopGate500 at Skyrise Technology Group

Founded in 1995 as the first network security enterprise in China, Skyrun Technology Group has become a leading network security, big data and cloud service provider in China. A command execution vulnerability exists in TopGate500 of Tianrongxin Technology Group, which can be exploited by an...