Unauthorized Access Vulnerability in ZStack Cloud Platform

ZStack cloud platform for Yanbian Agricultural and Commercial Bank through the "management node HA + storage dual-activity" solution to achieve high-availability architecture, to create an elastic, stable private cloud platform, showing excellent agile delivery capabilities. There is an...

Information leakage vulnerability in Chengdu Creative Interactive Technology Co.

Creative Interactive is a collection of Internet development, network operation, Internet services in one of the network technology companies, the main business contains website construction, system development, APP development, WeChat operation, website operation, Taobao operation, advertising...

Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-17465)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10.0. The vulnerability can be exploited by an attacker to obtain information...

Microsoft Win32k Component Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for use on personal devices.Microsoft Windows Server is a set of server operating systems.win32k is the kernel part of one of the Windows subsystems...

ABB eSOMS Weak Password Vulnerability

ABB eSOMS is a plant operations management system from ABB Switzerland. ABB eSOMS suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2014-2581

Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit...

Design/Logic Flaw

Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit...

CVE-2014-2581

Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit...

Security Bulletin: 10x vulnerability in IBM Control Center could allow an outside user to obtain the ID (CVE-2017-1152)

Summary IBM 10x vulnerability in IBM Control Center does not properly update the session id which could allow a user to obtain the ID in further attacks against the system. Vulnerability Details CVEID: CVE-2017-1152 DESCRIPTION: IBM Sterling Global Integration On-Demand Environment does not...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2020-01260)

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Adobe Acrobat and Reader have out-of-bounds read vulnerability, attackers can use the vulnerability ...

CVE-2019-5268

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories...

Input validation

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories...

CVE-2013-3314

The Loftek Nexus 543 IP Camera allows remote attackers to obtain 1 IP addresses via a request to getrealip.cgi or 2 firmware versions ui and system, timestamp, serial number, p2p port number, and wifi status via a request to getstatus.cgi...

KLA11622 Multiple vulnerabilities in Adobe Reader and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. Use After Free vulnerability can be exploited to execute arbitrary code ...

Microsoft SharePoint Information Disclosure Vulnerability

An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes. The...

Logic flaw vulnerability in Ruoyi's backend management system

Ruoyi backend management system is based on SpringBoot2.0 rights management system . A logic flaw vulnerability exists in the Ruoyi Backend Management System. An attacker can view the source code to obtain a username and password to log in to the backend...

Weak Password Vulnerability in Streaming Media Management Server

Streaming media server is the core system of streaming media application, and it is the key platform for operators to provide video services to users. The main function of streaming media server is to collect, cache, schedule and transmit and play streaming media content. A weak password...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38583)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Google Android Information Disclosure Vulnerability (CNVD-2019-38539)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

KLA11526 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A stack overflow vulnerability in libxslt can be exploited...