Lucene search
+L

1725 matches found

CNVD
CNVD
added 2020/05/23 12:0 a.m.2 views

Parallel overstepping vulnerability in Liangjing Mall online store shopping system

Liangjing Mall Online Shop Shopping System is a set of multi-functional online store system that can be suitable for different types of commodities, super flexible, three-tier distribution PC+Mobile+Micro-site. There is a parallel override vulnerability in LiangJing Mall Online Shop Shopping...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2020/05/20 12:0 a.m.4 views

SQL injection vulnerability exists in kkcms (CNVD-2020-33119)

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information database...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/05/19 12:0 a.m.3 views

SQL Injection Vulnerability in Qingdao Huishang Media Co.

Qingdao Hui Shang Media Co., Ltd, is an operator that provides companies with services such as online marketing, brand design, micro-marketing, and software customization and development. There is a SQL injection vulnerability in Qingdao Hui Shang Media Co., Ltd's website building system, which c...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/16 12:0 a.m.4 views

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant ru***_dl***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the Stone...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/14 12:0 a.m.2 views

KKCMS suffers from SQL injection vulnerability (CNVD-2020-30168)

kkcms is an open source video capture and playback system. KKCMS suffers from SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/13 12:0 a.m.6 views

Heybbs has a universal password login vulnerability

HEYBBS is a front-end based on bootstrap+jq+css,back-end php+mysql development of micro-community programs. Heybbs has a universal password login vulnerability that can be exploited by attackers to obtain sensitive database information...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2020/05/08 12:0 a.m.4 views

Advantech WebAccess Node Out-of-Bounds Read Vulnerability

Advantech WebAccess is a browser-based SCADA software package for monitoring, data acquisition and visualization. It is used to automate complex industrial processes where remote operation is required. An out-of-bounds read vulnerability exists in Advantech WebAccess Node, which can be exploited ...

7.5CVSS7.1AI score0.01529EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/07 12:0 a.m.2 views

Weak password vulnerability in behavioral management system of Shenzhen Tengxu IOT Technology Co.

Shenzhen Tengxu IOT Technology Co., Ltd. is an Internet technology company integrating R&D, design, manufacture, sales and service of commercial wireless network products. There is a weak password vulnerability in the behavior management system of Shenzhen Tengxu IOT Technology Co. Attackers can...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/05/06 12:0 a.m.9 views

PT-2020-2506 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the application policy configuration of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to...

7.8CVSS7AI score0.01061EPSS
SaveExploits0References3
Prion
Prion
added 2020/05/01 2:15 p.m.17 views

Design/Logic Flaw

Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration values via a crafted packet to UDP port 4800. NOTE: Moxa Service is an unauthenticated service that runs upon a first-time installation but can be disabled without ill effect...

5CVSS5.2AI score0.01407EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/05/01 12:0 a.m.3 views

YouDianCMS suffers from SQL injection vulnerability (CNVD-2020-28100)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability. Attackers can use this vulnerability to obtain...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2020/04/30 12:0 a.m.6 views

SQL injection vulnerability in waychar enrollment system (CNVD-2020-28129)

waychar registration system, an online registration system developed for sports events and other general events, supports public numbers and small programs. The waychar registration system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/04/29 12:0 a.m.4 views

Guangdong Century ICT Network Technology Co., Ltd Supervision Pass - Supervision Enterprise Comprehensive Business Management System suffers from SQL Injection Vulnerability

Supervision through - supervision enterprise integrated business management system, is the Guangdong Century ICT Network Technology Co., Ltd. for the domestic engineering consulting enterprises engineering supervision, project management, cost, bidding agency, project construction informatization...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2020/04/29 12:0 a.m.2 views

SQL Injection Vulnerability in Smart Electricity Cloud Platform of Ankre Electric Co.

Anchorui Electric Co., Ltd Smart Electricity Cloud Platform is a set of electrical fire early warning and prevention management system developed for the frequent occurrence of electrical fires. There is a SQL injection vulnerability in Ankre Electric Co., Ltd.'s Intelligent Electricity Cloud...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/04/28 12:0 a.m.3 views

Information Disclosure Vulnerability in Intimate Home Care Intimate Cat (imcat)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. Attentive Home Attentive Cat imcat suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

6.2AI score
SaveExploits0
CNVD
CNVD
added 2020/04/24 12:0 a.m.2 views

Xuzhou HaiPai Technology Co., Ltd. website building system suffers from SQL injection vulnerability

Xuzhou HaiPai Technology Co., Ltd. is the vice president of Jiangsu International Service Outsourcing Enterprises Association, the vice president of Xuzhou Software Industry Association, and also a state-recognized high-tech enterprises, technologically advanced service enterprises, software...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2020/04/23 12:0 a.m.3 views

SQL Injection Vulnerability in Backend Advertisements of Inkoo Online Education Software

Beijing IncuTimes Technology Co., Ltd "IncuTimes", founded in 2015, is a domestic educational products and technology service provider. A SQL injection vulnerability exists in the background advertisement map of Incu online education software, which can be exploited by attackers to obtain sensiti...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/04/22 12:0 a.m.4 views

Tongda OA system has a logic flaw vulnerability

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. Tongda OA system has a logical flaw...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2020/04/22 12:0 a.m.3 views

Heybbs Micro Community lo***.php file has SQL injection vulnerability

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. There is a SQL injection vulnerability in the Heybbs micro community lo.php file. Attackers can use the vulnerability to obtain sensitive information in the database...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/04/21 12:0 a.m.4 views

Jshop applet mall program has SQL injection vulnerability

Jshop small program mall is an open source e-commerce system. Jshop applet mall program has a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

7.6AI score
SaveExploits0
Rows per page
Query Builder