SQL Injection Vulnerability in NVS3000 Integrated Video Surveillance Platform of Datang Telecom Technology Co. Ltd (CNVD-2021-45156)

Datang Telecom Technology Co., Ltd. is a provider of products and integrated solutions in the field of information and communications. A SQL injection vulnerability exists in Datang Telecom Technology Co., Ltd.'s NVS3000 Integrated Video Surveillance Platform, which can be exploited by attackers ...

CVE-2020-12988

A potential denial of service DoS vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted...

CVE-2020-12988

A potential denial of service DoS vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted...

Denial of service

A potential denial of service DoS vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted...

CVE-2020-12988

CVE-2020-12988 affects AMD EPYC platforms (1st–3rd Gen) per AMD-SB-1021. The DoS issue is described as a hang during system reboot in the integrated chipset/AMD platform components (e.g., ASP/SMU/SEV family). Affected products include 1st Gen EPYC (Naples), 2nd Gen (Rome), and 3rd Gen (Milan) CPU...

CVE-2020-12988

A potential denial of service DoS vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted...

CVE-2021-27408

The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chained to the out-of-bounds write vulnerability on the Welch Allyn medical device management tools Welch Allyn Service Tool: versions prior to v1.10, Welch Ally...

Weak Password Vulnerability in 3Com-OfficeConnect ADSL Wireless 11g Firewall Router

Founded in 1979, 3Com is a U.S. equipment provider of security products, integrated voice appliances, and data networking solutions for businesses of all sizes. A weak password vulnerability exists in the 3Com-OfficeConnect ADSL Wireless 11g Firewall Router, which can be exploited by attackers to...

Logic Flaw Vulnerability in Smart Meter Integrated Management System of Xintian Technology Co.

Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A logic flaw vulnerability exists in the Smart Meter Integrated Management System SMIMS of Xintian Technology Corporation, which can be exploited by attackers to obtain sensitiv...

HPESBHF04143 rev.2 - HPE Integrated Lights-Out 4 (iLO 4) for Moonshot, Edgeline Cartridges and Blades, HPE Moonshot Chassis Management firmware, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m510 Server Cartridge - Prior to version 2.64 for Moonshot/Edgeline HPE ProLiant m710x Server...

Mmemed Welch Allyn Connex 缓冲区错误漏洞

The Mmemed Welch Allyn Connex is an industrial control device from the Spanish company Mmemed. An advanced touch screen monitor. A buffer error vulnerability exists in Hillrom Welch Allyn that originates from an out-of-bounds write and can be exploited by an attacker for arbitrary code execution...

Mmemed Welch Allyn Connex 缓冲区错误漏洞

The Mmemed Welch Allyn Connex is an industrial control device from the Spanish company Mmemed. An advanced touch screen monitor. A buffer error vulnerability exists in Hillrom Welch Allyn, which arises from out-of-bounds reads and writes, and successful exploitation of this vulnerability could...

Shanghai Qinwang Network Technology Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2021-41642)

Shanghai Qinwang Network Technology Co., Ltd. is a company with website construction, mobile Internet products and integrated marketing services as its core business. There is a SQL injection vulnerability in the website building system of Shanghai Qinwang Network Technology Co. Ltd, which can be...

SQL Injection Vulnerability in the Integrated Management System of Beijing Smart Vision Technology Industry Co.

Beijing Wisdom Vision Technology Industry Co., Ltd. is a participant in the drafting of national standards for smart city and one-card, and is a leading provider of Internet one-card overall solutions in China with more than ten years of experience in the field of one-card technology and the...

CVE-2021-29211

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29210

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

CVE-2021-29209

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

CVE-2021-29208

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

CVE-2021-29210

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

Crlf injection

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...