CVE-2021-31660

RIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow which could allow attackers to obtain sensitive information...

KuaiFanCMS Arbitrary File Read Vulnerability

KuaiFanCMS later referred to as KF using PHP5 + MYSQL as the technical basis for the development of KF using the Smarty template engine to build a site system. KuaiFanCMS V5 has a security vulnerability, the vulnerability stems from KuaiFanCMS V5 in chakanhtml.module.php file HTML url parameter...

Weak Password Vulnerability in Streaming Media Encoder Professional Edition of Hefei Duck Information Technology Co.

Hefei Duck Information Technology Co., Ltd. is a company focusing on the research of audio and video compression, transmission and analysis algorithms. A weak password vulnerability exists in Hefei Tuduck Information Technology Limited Streaming Encoder Professional Edition, which can be exploite...

CVE-2021-1569: Improper Input Validation

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause a denial of service DoS condition. For more information about these vulnerabilities, see the Details section of this...

CVE-2021-27481: Use of Hard-coded Cryptographic Key

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information...

ThroughTek P2P SDK Information Disclosure Vulnerability

ThroughTek P2P SDK is a software application from Throughtek for video surveillance products and large "audio/video" file transfers. An information disclosure vulnerability exists in the ThroughTek P2P SDK. The vulnerability can be exploited by an attacker to access sensitive information...

MacCMS v10 suffers from a SQL injection vulnerability (CNVD-2021-43044)

maccms is a cms website builder. A SQL injection vulnerability exists in maccms pages, which can be exploited by attackers to obtain sensitive information from the database...

Weak Password Vulnerability in UDAS Database Auditing System of Shanghai Ucad Information Technology Co.

UCloud Ucloud Technology Co., Ltd. is a neutral and secure cloud computing service platform that adheres to neutrality and does not get involved in customers' business areas. A weak password vulnerability exists in the database auditing system UDAS of Shanghai Ucloud Information Technology Co. Lt...

Weak Password Vulnerability in Green Alliance NF Next Generation Firewalls

NF Next-Generation Firewall is an enterprise-level next-generation border security product developed by Lvmeng Technology on the basis of the latest generation of 64-bit multi-core hardware platform, adopting the latest application-layer security protection concepts, and combining advanced...

SQL Injection Vulnerability in HelpManager CRM Customer Management System (CNVD-2021-42367)

The HelpManager CRM customer management system is a general-purpose customer relationship management system for small and medium-sized enterprises. SQL injection vulnerability exists in the HelpManager CRM customer management system. An attacker can exploit the vulnerability to obtain sensitive...

IBM Jazz Foundation Information Disclosure Vulnerability (CNVD-2021-39254)

IBM Jazz Foundation is a software development collaboration platform for IBM Rational products. An information disclosure vulnerability exists in IBM Jazz Foundation. An attacker could exploit this vulnerability to obtain sensitive information from error messages returned in a browser, which coul...

SQL Injection Vulnerability in Cscms of Guilin Chongsheng Network Technology Co.

Cscms is a diversified content management system, the use of PHP5 MYSQL as the technical basis for development, the use of OOP object-oriented approach to the basic operation of the framework to build. Guilin Chongsheng Network Technology Co., Ltd Cscms SQL injection vulnerability, attackers can...

IBM Engineering Test Management Authorization Issues Vulnerability

IBM Engineering Test Management is a collaborative quality management software from IBM that provides end-to-end test planning and test asset management to improve team efficiency. IBM Engineering Test Management suffers from an authorization issue vulnerability that stems from a lack of security...

SQL Injection Vulnerability in the Website Building System of Ningbo Poxfish Network Co.

Ningbo Pox Fish Network Co., Ltd. is a company that provides website construction and network promotion outsourcing services for enterprises with old and new creative thinking and excellent technology. Ningbo Poxfish Network Co., Ltd. website building system has a SQL injection vulnerability, whi...

SQL Injection Vulnerability in TXEHR Human Resource Management System

Dongguan City, the same share software technology limited company is a focus on manufacturing, commercial circulation, government departments, enterprises and institutions, such as management software research and development and service company. There is a SQL injection vulnerability in TXEHR,...

Weak password vulnerability in Crocus

Crocus is an energy data analytics platform. Crocus suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in the Website Building System of Haikou ECCOM Sky Information Technology Company Limited (CNVD-2021-41234)

hereinafter referred to as "ECCOM Sky" is a collection of website construction, website planning, website optimization, search engine optimization and a variety of office software development, program development in one of the high-speed and healthy development of network information technology...

Directory Traversal Vulnerability in Advantech WebAccess Node

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech in Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. A directory traversal vulnerability exists in Advantech WebAccess Node. An attacker can...

Weak Password Vulnerability in Firewall DCFOS at Digital China Cloud Computing Information Technology Co.

Ltd. is a professional company with independent network and cloud brand and intellectual property rights under Digital China Group, and is a network and cloud equipment and solution provider involved in IPv6. A weak password vulnerability exists in DCFOS of Digital China Beijing CloudTech...

Weak Password Vulnerability in RG-UAC 6000-ISG Video Access Security Gateway

RG-UAC 6000-ISG series video surveillance security gateway is a video surveillance network security reinforcement product independently developed by Ruijie Networks. The RG-UAC 6000-ISG video access security gateway has a weak password vulnerability, which can be exploited by attackers to obtain...