SQL Injection Vulnerability in Water Rights Trading System (CNVD-2021-18288)

Tangshan Liulin Automation Equipment Co., Ltd. is a high-tech enterprise specializing in the research and development, production, sales and system engineering technical services of Internet of Things security communication terminal and intelligent application platform software. There is a SQL...

Weak Password Vulnerability in RG-RSR Series Routers

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A weak password vulnerability exists in RG-RSR series routers, which can b...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2021-13207)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16411)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in JFinalOA

JFinalOA is based on the JFinal framework for the development of enterprise office systems . JFinalOA has a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

Weak Password Vulnerability in EBG2800 Enterprise Business Gateway Management System of ZTE Corporation

ZTE Corporation is a leading global provider of integrated communications solutions. A weak password vulnerability exists in the EBG2800 Enterprise Business Gateway management system of ZTE Corporation, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. There is a SQL injection vulnerability in the Home Decoration ERP Management System of Shanghai Decoration Alliance Information Technology Co., Ltd, which can be exploited by attackers ...

Directory Traversal Vulnerability in Video Coding Equipment Access Gateway of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a provider of security products and industry solutions. Ltd. video coding equipment access gateway directory traversal vulnerability, an attacker can use the vulnerability to traverse the device all directories and files to obtain sensitive...

Weak Password Vulnerability in Intelligent Park Integrated Management Platform of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in the intelligent park integrated management platform of Zhejiang Dahua Technology Co. An attacker can use this vulnerability to connect...

Catalog Traversal Vulnerability in Corto's Fully Intelligent Parking Payment System

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A directory traversal vulnerability exists in KOTO's fully intelligent parking charging system, which can be exploited by attacke...

Weak Password Vulnerability in Riptide Networks NBR WEB Management System

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A weak password vulnerability exists in the NBR WEB management system of Ruijie...

IBM Security Verify Information Queue Information Disclosure Vulnerability (CNVD-2021-11361)

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. An information disclosure vulnerability exists in IBM Security Verify Information Queue. The vulnerability stems from...

Weak Password Vulnerability in Founder Firewall WEB Login

Founder Group was invested and founded by Peking University in 1986. Academician Wang Xuan was the technical decision maker and founder of Founder Group, and his invention of Chinese character laser phototypesetting technology laid the foundation of Founder Group. A weak password vulnerability...

Weak Password Vulnerability in SANYO Cameras

sanyo generally refers to Sanyo. Sanyo English name: SANYO, a large Japanese conglomerate with a history of 60 years, is headquartered in Osaka, Japan, and its products cover a wide range of fields, including monitors, cell phones, digital cameras, machinery, and biopharmaceuticals. A weak passwo...

Weak password vulnerability in tantos series cameras

Ltd., committed to the research and development of video surveillance technology, to provide users with humanized video surveillance solutions. tantos series camera has a weak password vulnerability, attackers can use the vulnerability to obtain sensitive information...

Cross site scripting

A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected service. The vulnerability is due to insufficient validation of user-supplied...

Wenzhou Yougu Technology Co., Ltd. website building system has SQL injection vulnerabilities (CNVD-2021-16395)

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Technology Co., Ltd. station building system there is a SQL injection vulnerability, th...

Zero Takeoff Customer Relationship Management System suffers from SQL Injection Vulnerability

Chengdu Zero Takeoff Network is an information service provider, mainly dedicated to the Internet basic business, website construction, management system, software customization, optimization and promotion, e-commerce operations and other full range of information technology services. Zero Takeof...

Weak password vulnerability in H3C-ER3100

The H3C-ER3100 is a router from H3C. A weak password vulnerability exists in the H3C-ER3100, which can be exploited by an attacker to log into the backend of the router to obtain sensitive information...

Weak password vulnerability in Haofeng firewall system (CNVD-2021-14503)

Shenzhen Haofeng Communication Technology Co., Ltd. business scope: computer software, hardware, network products, technology development and purchase and sale, other domestic business, material supply and marketing industry. There is a weak password vulnerability in Haofeng's firewall system,...