S-CMS e-commerce system aj***.php page M_fen parameter has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page Mfen parameter SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in YouDianCMS Frontend Cu***.cl***.php File

YouDianCMS is an enterprise website management system developed by Changsha YouDian Software Technology Co. A SQL injection vulnerability exists in the Cu.cl.php file in the frontend of YouDianCMS. An attacker can use the vulnerability to obtain sensitive information from the database...

S-CMS enterprise website building system backend C_da*** parameter exists SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Cda parameter in the background of S-CMS enterprise website building system. Attackers...

Google Android Information Disclosure Vulnerability (CNVD-2019-38545)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

SemCMS foreign trade website backend has SQL injection vulnerability

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. semcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

CVE-2019-1948 Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability

A vulnerability in Cisco Webex Meetings Mobile iOS could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer SSL certificate. The vulnerability is due to insufficient SSL certificate validation by the affected...

CVE-2019-12627 Cisco Firepower Threat Defense Software Information Disclosure Vulnerability

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could...

SQL Injection Vulnerability in United Seat Management System

Hangzhou Lianchuang Information Technology Co., Ltd. is mainly engaged in library self-service, space service, intelligent library construction product development and service. SQL injection vulnerability exists in Lianchuang Seat Management System. An attacker can exploit the vulnerability to...

SQL Injection Vulnerability in Beijing Yizaitong E-procurement System

Beijing Yizaitong Information Technology Co., Ltd. has been committed to enterprise procurement information technology, procurement consulting field, oriented to procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain,...

SQL Injection Vulnerability in Hangzhou Chenshuo Network Technology Co.

Hangzhou Chenshuo Network Technology Co., Ltd. is a company that provides computer hardware and software, network information technology, e-commerce technology, technology development of electronic products and other services. Hangzhou Chenshuo Network Technology Co., Ltd. website building system...

S-CMS in***.php page suffers from a SQL injection vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS in.php page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in TXEHR V15 lo***.aspx Page

Dongguan City, the same share software technology limited company is a focus on manufacturing, commercial circulation, government departments, enterprises and institutions, such as management software development and service company. The same share human resources management system-TXEHR V15...

Ahsay Backup File Upload Remote Code Execution Vulnerability

Ahsay Backup is a backup software development company that specializes in developing backup software. A remote code execution vulnerability exists in Ahsay Backup File Upload, which can be exploited by an attacker to execute arbitrary code remotely, perform unauthorized operations, cause a denial...

SQL Injection Vulnerability in Website Building System of Shenyang Rande Technology Co.

Shenyang LAND Technology Co., Ltd. specializes in website construction and collaborative office software development. There is a SQL injection vulnerability in the sh.php file of the website building system of Shenyang LAND Technology Co. Attackers can utilize the vulnerability to obtain sensitiv...

PT-2019-2656 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, which could allow an unauthenticated, remote attacker...

Vulnerability fixed in glib

A vulnerability has been fixed for Glib in Ubuntu. The vulnerabilities allow a malicious person to perform attacks that lead to the following categoriesn of damage: - Denial-of-Service DoS; - Manipulation of data; - Circumvention of security measure; - Access to sensitive data; - Access to system...

Positive SQL Injection Vulnerability in Academic Affairs Management System

Ltd. is a software enterprise and high-tech enterprise specializing in consulting, planning, construction and service in the field of university education informatization. There is a SQL injection vulnerability in the Zhengfang Academic Affairs Management System, which can be exploited by attacke...

SQL Injection Vulnerability in Tpshop v3.5 Us***.php Page

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 Us.php page. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Tpshop Pr***.php Page at Active Order Deletion

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the deletion of active orders on the Tpshop Pr.php page. Attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2018-13885

Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD...