Foxit PDF Editor Remote Code Execution Vulnerability

Foxit PDF Editor is a PDF editor from Foxit, a Chinese company. A security vulnerability exists in Foxit PDF Editor, which stems from the fact that the product does not verify the existence of an Annotation object before operating on it. The vulnerability can be exploited to cause malicious code...

CVE-2021-41128: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Hygeia is an application for collecting and processing personal and case data in connection with communicable diseases. In affected versions all CSV Exports Statistics & BAG MED contain a CSV Injection Vulnerability. Users of the system are able to submit formula as exported fields which then get...

PT-2021-23111

Name of the Vulnerable Software and Affected Versions Hygeia versions prior to 1.30.4 Description The issue concerns a CSV Injection Vulnerability in the CSV Exports feature of the Hygeia application, which is used for collecting and processing personal and case data related to communicable...

CVE-2021-0635: Undefined Security Weakness

When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product:...

CVE-2021-0636: Undefined Security Weakness

When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:...

PT-2021-23056

Name of the Vulnerable Software and Affected Versions Eclipse Equinox versions prior to 4.21 Description The issue allows for a man-in-the-middle attack when using HTTP p2 repositories, potentially leading to the installation of malicious plug-ins that can run malicious code by serving incorrect ...

Cross-site Scripting (XSS) - Stored in ampache/ampache

✍️ Description This is a stored XSS in the mp3 management library. 🕵️‍♂️ Proof of Concept 1. Edit meta data with Audacity: 2. Create a new playlist that contains this file. 3. Open "Album" menu: 💥 Impact By uploading an mp3 with javascript code into meta tag could permit an attacker to execute...

CVE-2021-27930

Multiple stored XSS vulnerabilities in IrisNext Edition 9.5.16, which allows an authenticated or compromised user to inject malicious JavaScript in folder/file name within the application in order to grab other users’ sessions or execute malicious code in their browsers 1-click RCE...

Huawei HarmonyOS Buffer Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS Phones and Tablets A buffer error vulnerability exists in some Huawei products. Successful exploitation of the vulnerability could lead to...

Huawei HarmonyOS Buffer Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS Phones and Tablets A buffer error vulnerability exists in some Huawei products. Successful exploitation of the vulnerability could lead to...

Huawei HarmonyOS Buffer Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS Phones and Tablets A buffer error vulnerability exists in some Huawei products. Successful exploitation of the vulnerability could lead to...

PT-2021-14331

Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL SWITCH SMCS series products affected versions not specified Description: The issue allows an attacker to insert malicious code via LLDP frames into the web-based management, which could then be executed by the client...

CVE-2021-21004: Improper Neutralization of Input During Web Page Generation

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

CVE-2020-9493

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

Deserialization of untrusted data

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

CVE-2020-9493

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

CVE-2020-9493 Java deserialization in Chainsaw

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution...

CAJViewer has a binary vulnerability (CNVD-2021-41047)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A binary vulnerability exists in CAJViewer, which can be exploited by attackers to execute malicious code on a user's system...

Memory Corruption Vulnerability in Lovecraft Universal Link (CNVD-2021-40251)

Lovecraft Universal Link is a universal video and audio player from Lovecraft. A memory corruption vulnerability exists in Aqiyi Universal Media Player. An attacker can exploit the vulnerability to execute malicious code or crash the program...

Memory Corruption Vulnerability in Lovecraft Universal Link (CNVD-2021-40252)

Lovecraft Universal Link is a universal video and audio player from Lovecraft. A memory corruption vulnerability exists in Aqiyi Universal Media Player. An attacker can exploit the vulnerability to execute malicious code or crash the program...