Weak password vulnerability in behavioral management system of Shenzhen Tengxu IOT Technology Co.

Shenzhen Tengxu IOT Technology Co., Ltd. is an Internet technology company integrating R&D, design, manufacture, sales and service of commercial wireless network products. There is a weak password vulnerability in the behavior management system of Shenzhen Tengxu IOT Technology Co. Attackers can...

PT-2020-2506 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the application policy configuration of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to...

Design/Logic Flaw

Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration values via a crafted packet to UDP port 4800. NOTE: Moxa Service is an unauthenticated service that runs upon a first-time installation but can be disabled without ill effect...

YouDianCMS suffers from SQL injection vulnerability (CNVD-2020-28100)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability. Attackers can use this vulnerability to obtain...

SQL injection vulnerability in waychar enrollment system (CNVD-2020-28129)

waychar registration system, an online registration system developed for sports events and other general events, supports public numbers and small programs. The waychar registration system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

Guangdong Century ICT Network Technology Co., Ltd Supervision Pass - Supervision Enterprise Comprehensive Business Management System suffers from SQL Injection Vulnerability

Supervision through - supervision enterprise integrated business management system, is the Guangdong Century ICT Network Technology Co., Ltd. for the domestic engineering consulting enterprises engineering supervision, project management, cost, bidding agency, project construction informatization...

SQL Injection Vulnerability in Smart Electricity Cloud Platform of Ankre Electric Co.

Anchorui Electric Co., Ltd Smart Electricity Cloud Platform is a set of electrical fire early warning and prevention management system developed for the frequent occurrence of electrical fires. There is a SQL injection vulnerability in Ankre Electric Co., Ltd.'s Intelligent Electricity Cloud...

Information Disclosure Vulnerability in Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. Attentive Home Attentive Cat imcat suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Xuzhou HaiPai Technology Co., Ltd. website building system suffers from SQL injection vulnerability

Xuzhou HaiPai Technology Co., Ltd. is the vice president of Jiangsu International Service Outsourcing Enterprises Association, the vice president of Xuzhou Software Industry Association, and also a state-recognized high-tech enterprises, technologically advanced service enterprises, software...

SQL Injection Vulnerability in Backend Advertisements of Inkoo Online Education Software

Beijing IncuTimes Technology Co., Ltd "IncuTimes", founded in 2015, is a domestic educational products and technology service provider. A SQL injection vulnerability exists in the background advertisement map of Incu online education software, which can be exploited by attackers to obtain sensiti...

Tongda OA system has a logic flaw vulnerability

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. Tongda OA system has a logical flaw...

Heybbs Micro Community lo***.php file has SQL injection vulnerability

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. There is a SQL injection vulnerability in the Heybbs micro community lo.php file. Attackers can use the vulnerability to obtain sensitive information in the database...

Jshop applet mall program has SQL injection vulnerability

Jshop small program mall is an open source e-commerce system. Jshop applet mall program has a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-30181)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an information leakage vulnerability, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Tongda OA of Beijing Tongda Science & Technology Co.

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

WCMS suffers from SQL injection vulnerability (CNVD-2020-25555)

WCMS is an open source lightweight CMS system. WCMS suffers from an SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Shanghai Qinwang Network Technology Co.

Shanghai Qinwang Network Technology Co., Ltd. is a company with website construction, mobile Internet products and integrated marketing services as its core business. There is a SQL injection vulnerability in the website building system of Shanghai Qinwang Network Technology Co. Ltd, which can be...

CVE-2020-10598

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...

Design/Logic Flaw

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...

CVE-2020-10598

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...