SQL Injection Vulnerability in Human Evidence Rubik's Cube Management System

Human ID Magic is a citizen's personal information approval software, using advanced face recognition count and fingerprint comparison technology, can be directly in the field to quickly compare the real person with the side of the document information, real-time uploading database, to provide...

SQL Injection Vulnerability in Shipment 100 Virtual Goods Auto-shipment System (CNVD-2021-30193)

Shipping 100 Virtual Goods Autoship System is a powerful virtual goods autoship system/article pay to read system. Shipping 100 Virtual Goods Autoship System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Weak password vulnerability in AVA interactive management software of Guangzhou Ovia Electronic Technology Co.

Ltd. is a high-tech enterprise focusing on the research and development, production, sales and service of education informatization products. There is a weak password vulnerability in the AVA Interactive Management Software of Guangzhou Ovia Electronic Technology Co., Ltd, which can be exploited ...

Weak password vulnerability in multiple Huawei products

Huawei Technologies Co. Ltd. is an ICT information and communications infrastructure and smart terminal provider. A weak password vulnerability exists in multiple Huawei products. Attackers use weak passwords to log into the backend and obtain sensitive information...

Weak password vulnerability in Samsung WLAN AP (CNVD-2021-30051)

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. A command execution vulnerability...

SemCms suffers from SQL injection vulnerability (CNVD-2021-29089)

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

CVE-2021-1408 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

Online classroom WEB has information leakage vulnerability

Ltd. was founded in 2011, is an educational multimedia application platform technology and service provider. An information leakage vulnerability exists in the online classroom WEB, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28827)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29128)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29127)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Arbitrary File Read Vulnerability in Jellyfin

Jellyfin is a free software media system. Jellyfin suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

SQL Injection Vulnerability in Huaxia ERP (CNVD-2021-28478)

Huaxia ERP based on SpringBoot framework and SaaS model , to provide open source ERP software for small and medium-sized enterprises , currently focusing on sales and marketing inventory + financial + production functions . Huaxia ERP has a SQL injection vulnerability, which can be exploited by...

WEB IPCAMERA Logic Flaw Vulnerability in Shenzhen Baoriming Technology Co.

Ltd. is a high-tech camera manufacturer integrating R&D, manufacturing, sales and service, providing face recognition, vivo detection and other high-quality products based on Hesi intelligent hardware for users all over the world. Shenzhen Baoriming Technology Co., Ltd WEB IPCAMERA There is a log...

Anhui XED Software Technology Co., Ltd. XED OA exists arbitrary file download vulnerability

Anhui XED Software Technology Co., Ltd. was established on May 16, 2008. Legal representative Ru Caifeng, the company's scope of business includes: information technology in the field of software and mobile Internet application technology development, technical consulting, technical services, clo...

Logic Flaw Vulnerability in JieLink+ Mobile Charging Terminal

JieLink+ mobile charging terminal is a new generation of intelligent terminal operation platform solution launched by Shenzhen Jieshun Technology Industry Co. JieLink+ Mobile Toll Collection Terminal has a logic flaw vulnerability, which can be exploited by attackers to obtain sensitive informati...

Weak Password Vulnerability in Huawei RG2220 Router Management Page

Founded in 1987, Huawei is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in the management page of Huawei RG2220 router. Attackers use the weak password to log into the backend and obtain sensitive...

UFIDA U8 OA Collaboration Management Software has an arbitrary file download vulnerability

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in UFIDA U8 OA Collaboration Management Software. An attacker can exploit this vulnerability to downlo...

Eclipse Jetty Privilege Bypass Vulnerability

Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . A security vulnerability exists in Eclipse Jetty versions 9.4.37.v20210219 through 9.4.38.v20210224, which stems from a default conformance mode that allows requests with URIs containing...