196 matches found
IBM Security Secret Server Information Disclosure Vulnerability (CNVD-2022-05090)
IBM Security Secret Server is a privileged access management solution from IBM Corporation. The product supports password management, privileged account identification, and privileged session access monitoring logs.IBM Security Secret Server 11.0 previously had a security vulnerability that stemm...
Huawei Smartphone 安全漏洞
Huawei Smartphone is a smartphone from Huawei, a Chinese company. A security vulnerability exists in Huawei HarmonyOS, which arises from an improperly designed or implemented network system or product code development process...
Microsoft Edge for Android信息泄露漏洞
Microsoft Edge for Android is a web browser for Android from Microsoft Corporation USA. The vulnerability is caused by errors in the configuration of the network system or product during operation, which can be exploited by attackers to obtain sensitive information...
Maccms arbitrary file deletion vulnerability
Maccms is a PHP-based film and television content management system CMS. Maccms has an arbitrary file deletion vulnerability in version 10, which stems from a network system or product that does not properly validate input data and can be exploited by an attacker to delete arbitrary files on the...
Dell PowerScale OneFS Access Control Error Vulnerability
Dell PowerScale OneFS is an operating system from Dell, Inc. PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS has an access control error vulnerability in 9.1.0.x. The vulnerability stems from a network system or product that does not properly...
ZTE ZXHN H2640 Information Disclosure Vulnerability
The ZTE ZXHN H2640 is a home gateway device from ZTE Corporation China.An information disclosure vulnerability exists in the ZTE ZXHN H2640, which stems from a configuration and other errors in the network system or product during operation. An unauthorized attacker could exploit the vulnerabilit...
Totolink A720R Command Execution Vulnerability
The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. The TOTOLINK A720R suffers from a command execution vulnerability that stems from improper design or implementation during code development of the network system. The vulnerability can be exploited by an...
Totolink A720R Access Control Error Vulnerability
The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. A security vulnerability exists in the TOTOLINK A720R that originates from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker can exploit the...
Receita Federal IRPF Licensing Issue Vulnerability
Receita Federal Imposto de Renda Pessoa Física, a personal income tax application from Receita Federal, Inc. has an authorization problem vulnerability in Receita Federal IRPF that stems from a lack of authentication measures or insufficient authentication strength in the network system or produc...
Arbitrary File Download Vulnerability in Hewlett-Packard Trading (Shanghai) Co.
Hewlett-Packard Trading Shanghai Co., Ltd. is a company whose business scope includes computer equipment, printing equipment, imaging equipment, electronic products, and related parts and components of the above products. An arbitrary file download vulnerability exists in the web-based network...
Red Hat Ansible Code Issue Vulnerability (CNVD-2021-39042)
Red Hat Ansible is a computer system configuration manager from Red Hat. The product can be used to publish, manage, and orchestrate computer systems.Ansible Tower is one of the mission control applications that provides a user interface UI, dashboards, and a REST API. A code issue vulnerability...
Arbitrary File Read Vulnerability in Ruijie Campus Network Self-Service System
Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. An arbitrary file read vulnerability exists in Ruijie's campus network self-service system,...
CVE-2021-1391
A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker...
Unauthorized Access Vulnerability in GLIS, the General Library Integrated Management System of Beijing Qingda Xinyang Technology Co. Ltd (CNVD-2021-25891)
Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...
Cisco IOS XE SD-WAN Software 资源管理错误漏洞
Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An elevation of privilege vulnerability exists in the CLI management for SD-WAN in Cisco IOS XE. The vulnerability stems from a problem with the way the software handles concurren...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Cross-Site Scripting Vulnerability
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A cross-site scripting vulnerability in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which arises from a network system or product not...
D-Link DAP-1860 Remote Code Execution Vulnerability (CNVD-2022-38539)
The D-Link DAP-1860 is a WiFi range extender from D-Link, a Taiwan-based company. A remote code execution vulnerability exists in the D-Link DAP-1860, which stems from a network system or product that does not properly filter external input data during the construction of executable commands, and...
DualShield Code Issue Vulnerability
Deepnet DualShield is an application from Deepnet UK. that provides multi-factor authentication. A code issue vulnerability exists in DualShield that arises from improper design or implementation during code development of a network system or product...
Lucee Server Authorization Issues Vulnerability
An authorization issue vulnerability exists in Lucee Server that arises from a lack of authentication measures or insufficient authentication strength in a network system or product...