1725 matches found
Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-30181)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an information leakage vulnerability, which can be exploited by attackers to obtain sensitive information...
SQL Injection Vulnerability in Tongda OA of Beijing Tongda Science & Technology Co.
Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...
WCMS suffers from SQL injection vulnerability (CNVD-2020-25555)
WCMS is an open source lightweight CMS system. WCMS suffers from an SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in Website Building System of Shanghai Qinwang Network Technology Co.
Shanghai Qinwang Network Technology Co., Ltd. is a company with website construction, mobile Internet products and integrated marketing services as its core business. There is a SQL injection vulnerability in the website building system of Shanghai Qinwang Network Technology Co. Ltd, which can be...
CVE-2020-10598
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...
Design/Logic Flaw
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...
CVE-2020-10598
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...
SQL Injection Vulnerability in Longyan Xunsou Network Technology Co.
Longyan Xunsou Network Technology Co., Ltd. is a company engaged in B2B e-commerce operation technology research and informationization services. There is a SQL injection vulnerability in Longyan Xundsou Network Technology Co., Ltd's website building system, which can be exploited by attackers to...
SQL Injection Vulnerability in Tongda OA Backend
Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...
CVE-2019-20614
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Allshare allows attackers to access sensitive information. The Samsung ID is SVE-2018-13453 March 2019...
Schneider Electric IGSS SCADA Software
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: IGSS Interactive Graphical SCADA System Vulnerabilities: Path Traversal, Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of...
CVE-2019-16061
A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged user with access to the system to read sensitive data e.g., .htpasswd and create/modify/delete content e.g., under /var/www/html/docs with...
SQL Injection Vulnerability in Microcontrol Smart Cafeteria Management System of Shenzhen Microcontrol One Finger Technology Co.
Shenzhen Micro-control One Finger Technology is a value-integrated enterprise that aspires to biometrics technology research as well as applied product development, production, consulting, sales and service. Shenzhen Micro-control One Finger Technology Co., Ltd Micro-control Smart Cafeteria...
SQL Injection Vulnerability in the Website Building System of Beijing Beyond Limits Information Technology Co.
Beijing Beyond Infinity Information Technology Co., Ltd. is mainly engaged in computer information system professional and technical services, including software application system development, technical consulting, technical training, services and other related businesses and product sales. Ther...
SQL injection vulnerability in the us***.cl***.php file of YIXUNCMS enterprise website builder system
YIXUNCMS enterprise website construction system is a set of display website system developed by Yixun Software Studio for small and medium-sized enterprises. There is a SQL injection vulnerability in the us.cl.php file of YIXUNCMS enterprise website builder system. Attackers can use the...
Shaanxi Public Software Co., Ltd. website building system suffers from SQL injection vulnerability
Ltd. has been focusing on the promotion and application of industry informatization construction and management technology, and is a modern high-tech enterprise integrating industry informatization system, development of professional software and technical training service. Shaanxi public softwar...
Fixed several vulnerabilities in SAP products.
Vulnerabilities have been fixed in SAP products. The vulnerabilities enable a malicious person to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS SQL Injection Denial-of-Service DoS. Remote code execution User Rights Access to sensitive data SAP reports a...
EjuCMS suffers from SQL injection vulnerability (CNVD-2020-21980)
EJU real estate system ejucms is a set of localized O2O real estate website platform system. EjuCMS has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...
SQL Injection Vulnerability in Kingsoft V8+ Terminal Security System
V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...