SQL Injection Vulnerability in Enterprise Torch China's Website Building System (CNVD-2021-22995)

Founded in 2005, Enterprise Torch China is an early technology innovation company providing Internet application services for enterprise informationization construction. A SQL injection vulnerability exists in Enterprise Torch China's website builder system, which can be exploited by attackers to...

Logic flaw vulnerability in the backend of the Ruyi Management System

Ruoyi management system is based on SpringBoot2.0 permissions management system, the core technology using SpringBoot, MyBatis, Shiro, Thymeleaf, Bootstrap, Vue and so on. If the backend of the management system has a logic flaw vulnerability. Attackers can use the vulnerability to overstep the...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22937)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

PT-2021-2251 · Cisco · Cisco Network Services Orchestrator

Name of the Vulnerable Software and Affected Versions: Cisco Network Services Orchestrator NSO affected versions not specified Description: A vulnerability in the API subsystem and web-management interface of Cisco Network Services Orchestrator NSO could allow an unauthenticated, remote attacker ...

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive data As usual, Google...

UFIDA U8-OA l***.jsp suffers from SQL injection vulnerability.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA l.jsp, which can be exploited by an attacker to obtain sensitive information from the database...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16407)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

Vulnerabilities fixed in the Ubuntu kernel

Vulnerabilities have been fixed in the Ubuntu kernel. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Remote code execution User rights...

PostgreSQL Information Disclosure Vulnerability (CNVD-2021-14796)

PostgreSQL is a free object-relational database server database management system distributed under a flexible BSD-style license. An information disclosure vulnerability exists in PostgreSQL. An attacker could exploit the vulnerability could bypass access restrictions to data via privileges to...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Kaiqi Technology Co.

Nei Meng Kai Enterprise Technology Co., Ltd. is committed to serving local head brand customers as well as medium and small enterprises, providing professional one-stop Internet marketing solutions for enterprises. There is a SQL injection vulnerability in the website building system of Inner...

Google Chrome Security Updates (stable-channel-update-for-desktop_12-2021-03) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop_12-2021-03) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

SQL Injection Vulnerability in Ca***.aspx Page of KTO's Fully Intelligent Parking Video Charging System

Xiamen KTO Communication Technology Co., Ltd. is a static transportation system solution provider. A SQL injection vulnerability exists in the Ca.aspx page of KTO's Fully Intelligent Parking Video Toll Collection System, which can be exploited by attackers to obtain sensitive information from the...

Cisco Identity Services Engine Information Disclosure Vulnerability (CNVD-2021-24476)

Cisco Identity Services Engine ISE is a next-generation identity and access control policy platform that enables organizations to enforce compliance, enhance infrastructure security, and streamline their service operations. An information disclosure vulnerability exists in the Cisco Identity...

SQL Injection Vulnerability in the Website Building System of Foshan City Sohu Network Technology Co.

Foshan City, Sohu Network Technology Co., Ltd. is a commitment to provide a full range of web site construction services for the enterprise Internet company. Foshan City, Sohu Network Technology Co., Ltd. building system there is a SQL injection vulnerability, attackers can use the vulnerability ...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft has fixed two vulnerabilities in Dynamics. A malicious party could exploit the vulnerabilities to impersonate as another user and potentially gain access to sensitive data. Microsoft Dynamics: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...

SQL injection vulnerability in JTopCMS Ma***.jsp page of Hefei Mingjing Information Technology Co.

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Ltd. JTopCMS Ma.jsp page SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database information...

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed a large number of vulnerabilities in Apple iOS and iPadOS 14.4. A malicious party can exploit the vulnerabilities to cause the following types of damage: Denial-of-Service DoS. Remote code execution User rights Access to sensitive data -= Apple =- Apple has made updates available ...

SQL Injection Vulnerability in Aizumi CMS

Aizumi CMS is a php music website developed with php MySQL. Aizumi CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in frontend of wise on-demand server software

wise on-demand server software is server-side distribution software that provides streaming playback of audio and video files. A SQL injection vulnerability exists in the frontend of the sewise VOD server software. An attacker can exploit the vulnerability to obtain sensitive database information...