Monitorr Code Issue Vulnerability

A code issue vulnerability exists in Monitorr that arises from improper design or implementation during code development of a network system or product...

snapd Permission and Access Control Issues Vulnerability

snapd is an open source, cross-platform package management tool. A privilege permission and access control issue vulnerability exists in Snapd, which arises from a lack of effective privilege permission and access control measures in a network system or product...

Intel SOC driver package for STK1A32SC security vulnerability

Intel SOC driver package for STK1A32SC is a computer stick from Intel Corporation USA. A security vulnerability exists in the Intel SOC driver package for STK1A32SC that arises from a lack of effective privilege-granting and access-control measures on a networked system or product...

Issuer Input Validation Error Vulnerability

An input validation error vulnerability exists in Issuer that arises from a network system or product that does not properly validate incoming data...

Linux kernel llcp_sock_connect() memory leak vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel llcpsockconnect, which stems from an improperly designed or implemented code development process for a network system o...

Huawei Honor 20 PRO Information Disclosure Vulnerability

Huawei Honor V20 is a smartphone from Chinese company Huawei Huawei. Huawei Honor 20 PRO suffers from an information disclosure vulnerability that stems from errors such as configuration during operation of a network system or product. An attacker can use the vulnerability to obtain sensitive...

Red Hat CloudForms Code Issue Vulnerability

Red Hat CloudForms is a hybrid infrastructure management platform from Red Hat, Inc. The platform provides deployment, management, and other capabilities across virtual machines, clouds, containers, and physical infrastructure. A code issue vulnerability exists in Red Hat CloudForms. The...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-50924)

The NETGEAR WAC505 and others are a wireless access point AP from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in a...

Multiple NETGEAR Product Injection Vulnerabilities (CNVD-2021-59159)

NETGEAR R7000 is a wireless router, NETGEAR D3600 is a wireless modem, and NETGEAR WNDR3700 is a wireless router. An injection vulnerability exists in multiple NETGEAR products. The vulnerability stems from a lack of proper validation of user input data by a network system or product during user...

Injection Vulnerability in Multiple NETGEAR Products (CNVD-2021-61051)

NETGEAR R7800 and others are products of NETGEAR, Inc.NETGEAR R7800 is a wireless router.NETGEAR D7800 is a wireless modem.NETGEAR WNDR4300 is a wireless router. An injection vulnerability exists in multiple NETGEAR products. The vulnerability arises from a lack of proper validation of user input...

NETGEAR D6100 Injection Vulnerability

The NETGEAR D6100 is a wireless modem from NETGEAR. An injection vulnerability exists in versions prior to NETGEAR D6100 1.0.0.500.0.50. The vulnerability arises from a lack of proper validation of user input data by the network system or product during user input operations of constructed...

Path traversal vulnerability in multiple NETGEAR products

NETGEAR M4300-28G and others are a managed switch from NETGEAR, Inc. A path traversal vulnerability exists in several NETGEAR products. The vulnerability stems from a network system or product failing to properly filter specific elements in a resource or file path. An attacker could use this...

Multiple NETGEAR Product Command Injection Vulnerabilities (CNVD-2021-61058)

NETGEAR R7800 is a wireless router, NETGEAR D6100 is a wireless modem, and NETGEAR WNDR3700 is a wireless router. A command injection vulnerability exists in multiple NETGEAR products. The vulnerability stems from a network system or product not properly filtering special elements of external inp...

Unauthorized access vulnerability in the website building system of Hebei Tangshan Great Wall Network Co.

Great Wall Network Information Studio focuses on providing professional Internet services, mainly serving domestic small and medium-sized enterprises. Hebei Tangshan Great Wall Network Co., Ltd. building system has unauthorized access vulnerability, attackers can use the vulnerability to view and...

eivindfjeldstad-dot Input Validation Error Vulnerability

eivindfjeldstad-dot is a software package that supports getting and setting object properties in dot representation. An input validation error vulnerability exists in eivindfjeldstad-dot. The vulnerability originates from a network system or product that does not properly validate input data...

Netty Environment Issues Vulnerabilities

Netty is a non-blocking I/O client-server framework from the Netty community, which is primarily used for developing Java web applications such as protocol servers and clients. There is an environmental issue vulnerability in Netty. The vulnerability stems from an unreasonable environmental facto...

ASUS ZenFone AR Access Control Error Vulnerability

The ASUS ZenFone AR is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ZenFone AR. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could exploit th...

SQL Injection Vulnerability in Jinhua Flying Fox Network System

Jinhua Flying Fox Network Technology Co., Ltd. for a set of domain name registration, web hosting, enterprise post office, website construction, network promotion as one of the comprehensive technology enterprises. Jinhua Flying Fox Network website builder system has a SQL injection vulnerability...

Cisco IOS XE HTTP Server Denial of Service Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the HTTP server code of Cisco IOS XE. The vulnerability stems from a logic error in the logging mechanism. An attacker could exploit this vulnerability to cause the...

Logic Flaw Vulnerability in RG-SAM Campus Network Self-Service System

Ruijie RG-SAM authentication and billing management system not only supports the high integration of software and hardware to form a highly available solution, but also adds value-added profit and other functions to provide users with a win-win cooperation solution with a flexible mode of...