Weak Password Vulnerability in Dynamic Ring Monitoring System of Shijiazhuang Hejia Technology Co.

Shijiazhuang Hejia Technology Co., Ltd. is a high-tech enterprise specializing in the development and application of computer room environment and power equipment monitoring system products. Shijiazhuang Hejia Technology Co., Ltd. dynamic ring monitoring system has a weak password vulnerability,...

MTN Group: Reflected Cross Site Scripting Cisco ASA on myvpn.mtncameroon.net CVE-2020-3580

The Cisco ASA Adaptive Security Appliance and Cisco Firepower Threat Defense FTD Software were found to contain vulnerabilities in their web services interface. These vulnerabilities could have allowed an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user ...

Zammad Incorrect Access Control Vulnerability (CNVD-2021-48886)

Zammad is a Web-based open source helpdesk/customer support system. Zammad suffers from an incorrect access control vulnerability. A remote attacker could exploit this vulnerability to obtain sensitive information through email connection configuration probes...

PHPGurukul Hospital Management System SQL Injection Vulnerability (CNVD-2021-44926)

PHPGurukul Hospital Management System is a web application for hospitals to manage doctors and patients. A SQL injection vulnerability exists in \hms\checkavailability.php in PHPGurukul Hospital Management System version 4.0. An attacker can exploit this vulnerability to obtain sensitive...

SerenityOS stack buffer overflow vulnerability (CNVD-2021-44280)

SerenityOS is a graphical Unix-like operating system for x86 computers. A stack buffer overflow vulnerability exists in the setrange test in TestBitmap in SerenityOS. An attacker can exploit this vulnerability to obtain sensitive information...

07FLY-CRM Customer Management System v1.2 suffers from SQL injection vulnerability (CNVD-2021-46819)

07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM customer management system v1.2 SQL injection vulnerability , attackers can exploit the vulnerability to obtain...

CVE-2021-31660

RIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow which could allow attackers to obtain sensitive information...

KuaiFanCMS Arbitrary File Read Vulnerability

KuaiFanCMS later referred to as KF using PHP5 + MYSQL as the technical basis for the development of KF using the Smarty template engine to build a site system. KuaiFanCMS V5 has a security vulnerability, the vulnerability stems from KuaiFanCMS V5 in chakanhtml.module.php file HTML url parameter...

Weak Password Vulnerability in Streaming Media Encoder Professional Edition of Hefei Duck Information Technology Co.

Hefei Duck Information Technology Co., Ltd. is a company focusing on the research of audio and video compression, transmission and analysis algorithms. A weak password vulnerability exists in Hefei Tuduck Information Technology Limited Streaming Encoder Professional Edition, which can be exploite...

ThroughTek P2P SDK Information Disclosure Vulnerability

ThroughTek P2P SDK is a software application from Throughtek for video surveillance products and large "audio/video" file transfers. An information disclosure vulnerability exists in the ThroughTek P2P SDK. The vulnerability can be exploited by an attacker to access sensitive information...

MacCMS v10 suffers from a SQL injection vulnerability (CNVD-2021-43044)

maccms is a cms website builder. A SQL injection vulnerability exists in maccms pages, which can be exploited by attackers to obtain sensitive information from the database...

Weak Password Vulnerability in UDAS Database Auditing System of Shanghai Ucad Information Technology Co.

UCloud Ucloud Technology Co., Ltd. is a neutral and secure cloud computing service platform that adheres to neutrality and does not get involved in customers' business areas. A weak password vulnerability exists in the database auditing system UDAS of Shanghai Ucloud Information Technology Co. Lt...

Weak Password Vulnerability in Green Alliance NF Next Generation Firewalls

NF Next-Generation Firewall is an enterprise-level next-generation border security product developed by Lvmeng Technology on the basis of the latest generation of 64-bit multi-core hardware platform, adopting the latest application-layer security protection concepts, and combining advanced...

SQL Injection Vulnerability in HelpManager CRM Customer Management System (CNVD-2021-42367)

The HelpManager CRM customer management system is a general-purpose customer relationship management system for small and medium-sized enterprises. SQL injection vulnerability exists in the HelpManager CRM customer management system. An attacker can exploit the vulnerability to obtain sensitive...

IBM Jazz Foundation Information Disclosure Vulnerability (CNVD-2021-39254)

IBM Jazz Foundation is a software development collaboration platform for IBM Rational products. An information disclosure vulnerability exists in IBM Jazz Foundation. An attacker could exploit this vulnerability to obtain sensitive information from error messages returned in a browser, which coul...

IBM Engineering Test Management Authorization Issues Vulnerability

IBM Engineering Test Management is a collaborative quality management software from IBM that provides end-to-end test planning and test asset management to improve team efficiency. IBM Engineering Test Management suffers from an authorization issue vulnerability that stems from a lack of security...

SQL Injection Vulnerability in Cscms of Guilin Chongsheng Network Technology Co.

Cscms is a diversified content management system, the use of PHP5 MYSQL as the technical basis for development, the use of OOP object-oriented approach to the basic operation of the framework to build. Guilin Chongsheng Network Technology Co., Ltd Cscms SQL injection vulnerability, attackers can...

SQL Injection Vulnerability in the Website Building System of Ningbo Poxfish Network Co.

Ningbo Pox Fish Network Co., Ltd. is a company that provides website construction and network promotion outsourcing services for enterprises with old and new creative thinking and excellent technology. Ningbo Poxfish Network Co., Ltd. website building system has a SQL injection vulnerability, whi...

Weak password vulnerability in Crocus

Crocus is an energy data analytics platform. Crocus suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in TXEHR Human Resource Management System

Dongguan City, the same share software technology limited company is a focus on manufacturing, commercial circulation, government departments, enterprises and institutions, such as management software research and development and service company. There is a SQL injection vulnerability in TXEHR,...