SQL Injection Vulnerability in Longyan Xunsou Network Technology Co.

Longyan Xunsou Network Technology Co., Ltd. is a company engaged in B2B e-commerce operation technology research and informationization services. There is a SQL injection vulnerability in Longyan Xundsou Network Technology Co., Ltd's website building system, which can be exploited by attackers to...

SQL Injection Vulnerability in Tongda OA Backend

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

CVE-2019-20614

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Allshare allows attackers to access sensitive information. The Samsung ID is SVE-2018-13453 March 2019...

Schneider Electric IGSS SCADA Software

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: IGSS Interactive Graphical SCADA System Vulnerabilities: Path Traversal, Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of...

CVE-2019-16061

A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged user with access to the system to read sensitive data e.g., .htpasswd and create/modify/delete content e.g., under /var/www/html/docs with...

SQL Injection Vulnerability in Microcontrol Smart Cafeteria Management System of Shenzhen Microcontrol One Finger Technology Co.

Shenzhen Micro-control One Finger Technology is a value-integrated enterprise that aspires to biometrics technology research as well as applied product development, production, consulting, sales and service. Shenzhen Micro-control One Finger Technology Co., Ltd Micro-control Smart Cafeteria...

SQL Injection Vulnerability in the Website Building System of Beijing Beyond Limits Information Technology Co.

Beijing Beyond Infinity Information Technology Co., Ltd. is mainly engaged in computer information system professional and technical services, including software application system development, technical consulting, technical training, services and other related businesses and product sales. Ther...

SQL injection vulnerability in the us***.cl***.php file of YIXUNCMS enterprise website builder system

YIXUNCMS enterprise website construction system is a set of display website system developed by Yixun Software Studio for small and medium-sized enterprises. There is a SQL injection vulnerability in the us.cl.php file of YIXUNCMS enterprise website builder system. Attackers can use the...

Shaanxi Public Software Co., Ltd. website building system suffers from SQL injection vulnerability

Ltd. has been focusing on the promotion and application of industry informatization construction and management technology, and is a modern high-tech enterprise integrating industry informatization system, development of professional software and technical training service. Shaanxi public softwar...

Fixed several vulnerabilities in SAP products.

Vulnerabilities have been fixed in SAP products. The vulnerabilities enable a malicious person to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS SQL Injection Denial-of-Service DoS. Remote code execution User Rights Access to sensitive data SAP reports a...

EjuCMS suffers from SQL injection vulnerability (CNVD-2020-21980)

EJU real estate system ejucms is a set of localized O2O real estate website platform system. EjuCMS has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Kingsoft V8+ Terminal Security System

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

CVE-2020-9407

IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICEJSONRPCCOOKIE cookie...

SQL Injection Vulnerability in Suzhou Topps Website Building System

Suzhou Topps Network Technology Co., Ltd. is a company focusing on website construction, website optimization and other businesses. A SQL injection vulnerability exists in the website building system of Suzhou Topps Network Technology Co. An attacker can use this vulnerability to obtain sensitive...

SQL Injection Vulnerability in Hongfeng Technology CMS Website Management System of Dingbian Lenet Technology Co.

Dingbian Le Net Technology Co., Ltd, is a professional e-commerce solutions, O2O solutions, mobile Internet application system service providers, long-term commitment to e-commerce system solutions, independent shopping malls, vertical SNS community, micro letter marketing platform, cell phone...

Logic flaw vulnerability in the uc***.php file in the frontend of Five Fingers CMS

Five Fingers CMS is an open source content management system. A logic flaw vulnerability exists in the uc.php file in the frontend of Five Fingers CMS. Attackers can use the vulnerability to log in to any user , access sensitive information , to perform unauthorized operations...

Adobe Reader 2017 Security Update (APSB20-05) - Windows

Adobe Reader 2017 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

GitLab CE/EE Information Disclosure Vulnerability (CNVD-2020-04928)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

SQL injection vulnerability in the background of WoSmart's small program system

WoSmart list store mall small program a key to create and publish small programs, data can be controlled, support for OEM settings. WoSmith small program system background there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive information in the database...

Design/Logic Flaw

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...