Lucene search
+L

1710 matches found

CNVD
CNVD
added 2020/06/14 12:0 a.m.2 views

ShopsN open source mall system de** SQL injection vulnerabilities exist

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system de there is a SQL injection...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/06/04 12:0 a.m.20 views

Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-32928)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by attackers to obtain sensitive information...

4.4CVSS6.6AI score0.00143EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/06/02 12:0 a.m.4 views

Google Android System Information Disclosure Vulnerability (CNVD-2020-31523)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android 10. An attacker can exploit the vulnerability to obtain sensitive informati...

5.5CVSS6.2AI score0.00175EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/05/28 12:0 a.m.53 views

Apple Safari Security Update (HT211177)

Apple Safari is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.9AI score0.77246EPSS
SaveExploits6References1
CNVD
CNVD
added 2020/05/25 12:0 a.m.3 views

SQL Injection Vulnerability in the Website Building System of Tianze Culture Communication (Henan) Co.

Ltd. is a network service company that provides Internet network information services, engages in Internet value-added services, and provides enterprises with customized network solutions, website construction, network promotion and other services. There is a SQL injection vulnerability in the...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/23 12:0 a.m.2 views

Parallel overstepping vulnerability in Liangjing Mall online store shopping system

Liangjing Mall Online Shop Shopping System is a set of multi-functional online store system that can be suitable for different types of commodities, super flexible, three-tier distribution PC+Mobile+Micro-site. There is a parallel override vulnerability in LiangJing Mall Online Shop Shopping...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2020/05/20 12:0 a.m.4 views

SQL injection vulnerability exists in kkcms (CNVD-2020-33119)

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information database...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/05/19 12:0 a.m.3 views

SQL Injection Vulnerability in Qingdao Huishang Media Co.

Qingdao Hui Shang Media Co., Ltd, is an operator that provides companies with services such as online marketing, brand design, micro-marketing, and software customization and development. There is a SQL injection vulnerability in Qingdao Hui Shang Media Co., Ltd's website building system, which c...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/16 12:0 a.m.4 views

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant ru***_dl***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the Stone...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/14 12:0 a.m.2 views

KKCMS suffers from SQL injection vulnerability (CNVD-2020-30168)

kkcms is an open source video capture and playback system. KKCMS suffers from SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/13 12:0 a.m.5 views

Heybbs has a universal password login vulnerability

HEYBBS is a front-end based on bootstrap+jq+css,back-end php+mysql development of micro-community programs. Heybbs has a universal password login vulnerability that can be exploited by attackers to obtain sensitive database information...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2020/05/08 12:0 a.m.3 views

Advantech WebAccess Node Out-of-Bounds Read Vulnerability

Advantech WebAccess is a browser-based SCADA software package for monitoring, data acquisition and visualization. It is used to automate complex industrial processes where remote operation is required. An out-of-bounds read vulnerability exists in Advantech WebAccess Node, which can be exploited ...

7.5CVSS7.1AI score0.01529EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/07 12:0 a.m.2 views

Weak password vulnerability in behavioral management system of Shenzhen Tengxu IOT Technology Co.

Shenzhen Tengxu IOT Technology Co., Ltd. is an Internet technology company integrating R&D, design, manufacture, sales and service of commercial wireless network products. There is a weak password vulnerability in the behavior management system of Shenzhen Tengxu IOT Technology Co. Attackers can...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/05/06 12:0 a.m.8 views

PT-2020-2506 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the application policy configuration of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to...

7.8CVSS7AI score0.01061EPSS
SaveExploits0References3
Prion
Prion
added 2020/05/01 2:15 p.m.17 views

Design/Logic Flaw

Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration values via a crafted packet to UDP port 4800. NOTE: Moxa Service is an unauthenticated service that runs upon a first-time installation but can be disabled without ill effect...

5CVSS5.2AI score0.01407EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/05/01 12:0 a.m.3 views

YouDianCMS suffers from SQL injection vulnerability (CNVD-2020-28100)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability. Attackers can use this vulnerability to obtain...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2020/04/30 12:0 a.m.6 views

SQL injection vulnerability in waychar enrollment system (CNVD-2020-28129)

waychar registration system, an online registration system developed for sports events and other general events, supports public numbers and small programs. The waychar registration system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/04/29 12:0 a.m.4 views

Guangdong Century ICT Network Technology Co., Ltd Supervision Pass - Supervision Enterprise Comprehensive Business Management System suffers from SQL Injection Vulnerability

Supervision through - supervision enterprise integrated business management system, is the Guangdong Century ICT Network Technology Co., Ltd. for the domestic engineering consulting enterprises engineering supervision, project management, cost, bidding agency, project construction informatization...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2020/04/29 12:0 a.m.2 views

SQL Injection Vulnerability in Smart Electricity Cloud Platform of Ankre Electric Co.

Anchorui Electric Co., Ltd Smart Electricity Cloud Platform is a set of electrical fire early warning and prevention management system developed for the frequent occurrence of electrical fires. There is a SQL injection vulnerability in Ankre Electric Co., Ltd.'s Intelligent Electricity Cloud...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/04/28 12:0 a.m.2 views

Information Disclosure Vulnerability in Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. Attentive Home Attentive Cat imcat suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

6.2AI score
SaveExploits0
Rows per page
Query Builder