Weak password vulnerability in multiple Huawei products

Huawei Technologies Co. Ltd. is an ICT information and communications infrastructure and smart terminal provider. A weak password vulnerability exists in multiple Huawei products. Attackers use weak passwords to log into the backend and obtain sensitive information...

Weak password vulnerability in Samsung WLAN AP (CNVD-2021-30051)

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. A command execution vulnerability...

SemCms suffers from SQL injection vulnerability (CNVD-2021-29089)

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

CVE-2021-1408 Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28827)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

Online classroom WEB has information leakage vulnerability

Ltd. was founded in 2011, is an educational multimedia application platform technology and service provider. An information leakage vulnerability exists in the online classroom WEB, which can be exploited by attackers to obtain sensitive information...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29127)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29128)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Arbitrary File Read Vulnerability in Jellyfin

Jellyfin is a free software media system. Jellyfin suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

SQL Injection Vulnerability in Huaxia ERP (CNVD-2021-28478)

Huaxia ERP based on SpringBoot framework and SaaS model , to provide open source ERP software for small and medium-sized enterprises , currently focusing on sales and marketing inventory + financial + production functions . Huaxia ERP has a SQL injection vulnerability, which can be exploited by...

WEB IPCAMERA Logic Flaw Vulnerability in Shenzhen Baoriming Technology Co.

Ltd. is a high-tech camera manufacturer integrating R&D, manufacturing, sales and service, providing face recognition, vivo detection and other high-quality products based on Hesi intelligent hardware for users all over the world. Shenzhen Baoriming Technology Co., Ltd WEB IPCAMERA There is a log...

Anhui XED Software Technology Co., Ltd. XED OA exists arbitrary file download vulnerability

Anhui XED Software Technology Co., Ltd. was established on May 16, 2008. Legal representative Ru Caifeng, the company's scope of business includes: information technology in the field of software and mobile Internet application technology development, technical consulting, technical services, clo...

Logic Flaw Vulnerability in JieLink+ Mobile Charging Terminal

JieLink+ mobile charging terminal is a new generation of intelligent terminal operation platform solution launched by Shenzhen Jieshun Technology Industry Co. JieLink+ Mobile Toll Collection Terminal has a logic flaw vulnerability, which can be exploited by attackers to obtain sensitive informati...

UFIDA U8 OA Collaboration Management Software has an arbitrary file download vulnerability

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in UFIDA U8 OA Collaboration Management Software. An attacker can exploit this vulnerability to downlo...

Weak Password Vulnerability in Huawei RG2220 Router Management Page

Founded in 1987, Huawei is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in the management page of Huawei RG2220 router. Attackers use the weak password to log into the backend and obtain sensitive...

Weak Password Vulnerability in Tenda Router Management Platform

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Tengda router management platform has a weak password vulnerability, which can be exploited by attackers to obtain sensitive...

Eclipse Jetty Privilege Bypass Vulnerability

Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . A security vulnerability exists in Eclipse Jetty versions 9.4.37.v20210219 through 9.4.38.v20210224, which stems from a default conformance mode that allows requests with URIs containing...

Arbitrary File Read Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.

Ltd. is a high-tech enterprise integrating product research and development, application integration and customer service, with the main goal of providing high-quality application software system design, integration and maintenance services for users in the library industry. There is an arbitrary...

SQL Injection Vulnerability in Hongyang Mobile Development Platform

Ltd. is a professional provider of health informatization solutions and application software. A SQL injection vulnerability exists in Hongyang Mobile Development Platform, which can be exploited by attackers to obtain sensitive information from the database...