SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-40199)

Tianxin Instrumentation Group Limited Company is a domestic service provider of flow meters and gas application system solutions. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited Company. An attacker can exploit the vulnerability to obtain...

Information Leakage Vulnerability in Riptide Networks' MCP Marketing Cloud Platform

Ruijie Networks is a CT infrastructure and industry solutions provider, with the main business of research, development, design and sales of network equipment, network security products and cloud desktop solutions. An information leakage vulnerability exists in Ruijie Network's MCP marketing clou...

SQL Injection Vulnerability in Hanvon's Face Recognition Attendance Management System

Ltd. is committed to the research and application of intelligent interaction technology in multiple fields. A SQL injection vulnerability exists in Hanvon's face recognition attendance management system. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38040)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Microsoft Windows Multiple Vulnerabilities (KB5003173)

This host is missing a critical security update according to Microsoft KB5003173 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5003172)

This host is missing a critical security update according to Microsoft KB5003172 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5003174)

This host is missing a critical security update according to Microsoft KB5003174 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hurricane CMS 1.1.0 SQL Injection Vulnerability in Backend

Hurricane CMS is an open source CMS system, features all open source, efficient and convenient secondary development, simple background, plug-in categorization, adapt to various types of websites to expand the construction. Hurricane CMS1.1.0 background SQL injection vulnerability , attackers can...

PT-2021-10282 · Unknown · Online Book Store

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue is related to an Incorrect Access Control vulnerability. It could allow a remote malicious user to bypass authentication and obtain sensitive information via the admin verify.php endpoint...

Vulnerabilities fixed in Samsung products

Several vulnerabilities have been fixed in various Android-based products from Samsung. The vulnerabilities allow a malicious person, remotely or otherwise, to carry out attacks that lead to the following categories of damage: Manipulation of data Circumvention of security measure Remote code...

Vulnerabilities fixed in GitLab CE and EE

GitLab has fixed several vulnerabilities in GitLab Community Edition and Enterprise Edition. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication Accessing sensitive da...

Aruba Networks AirWave Management Platform 代码问题漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management. An XML external entity injection vulnerability exists in Aruba Networks AirWave Management Platform versions prior to 8.2.12.1, which can be exploited by a remote attacker to submit a...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System it***_te***_po***.php Page

China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the ittepo.php page of the Telecom Gateway Configuration Management System, which can be exploited by attackers to...

SQL Injection Vulnerability in HBI System of Beida Medical Information System

The built-in dashboard of Beida Medical HBI system supports multiple devices, allowing you to seamlessly enjoy the ultimate experience of cross-screen technology on your computer, tablet and cell phone. A SQL injection vulnerability exists in Beida Medical HBI system, which can be exploited by...

Vulnerabilities fixed in Oracle VirtualBox

Vulnerabilities have been fixed in Oracle Virtualization. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Circumvention of security measure. Remote code execution Administrator/Root privileges Access to sensitive...

Vulnerabilities fixed in Oracle Supply Chain

Vulnerabilities have been fixed in Oracle Supply Chain Suite. The vulnerabilities allow a malicious party to conduct attacks execute attacks that result in the following categories of damage: Manipulation of data. Remote code execution User rights Access to sensitive data...

Vulnerabilities fixed in Oracle E-Business Suite

Vulnerabilities have been fixed in Oracle E-Business Suite. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data Access to system data...

Vulnerabilities fixed in Oracle Fusion Middleware

Vulnerabilities have been fixed in Oracle Fusion Middleware. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...

Vulnerabilities fixed in Oracle Enterprise Manager

Vulnerabilities have been fixed in Oracle Enterprise Manager. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication Accessing sensitive data Accessing...

Vulnerabilities fixed in Oracle PeopleSoft

Vulnerabilities have been fixed in Oracle PeopleSoft. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Manipulation of data Remote code execution User rights Access to sensitive data...