CVE-2021-1305 Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

CVE-2021-1305 Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

CVE-2021-1302 Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

Binatone has information leakage vulnerabilities in several of its products

Binatone is a leading company dedicated to providing innovative consumer electronics and lifestyle products. An information disclosure vulnerability exists in several Binatone products, which can be exploited by an attacker to successfully log into the backend and obtain sensitive information...

Weak Password Vulnerability in Tianrongxin Access Gateway System

TIANRONGXIN access gateway system contains WAN acceleration, link load balancing, bandwidth guarantee, VPN, firewall, WIFI and other functional modules. Weak password vulnerability exists in Tianrongxin access gateway system. Attackers can utilize the vulnerability to log in the background and...

SQL Injection Vulnerability in KTO's Fully Intelligent Parking Video Charging System (CNVD-2021-08434)

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in KOTO's fully intelligent parking video charging system. An attacker can exploit the...

SQL Injection Vulnerability in Discuz!

Discuz! is a general-purpose community forum software system. A SQL injection vulnerability exists in Discuz! An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in KTO's Fully Intelligent Parking Video Charging System (CNVD-2021-08431)

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in KOTO's fully intelligent parking video charging system. An attacker can exploit the...

Logical flaws in the Ruyi management system

Ruoyi management system is a SpringBoot2.0 based on the use of Spring, MyBatis, Shiro rights management system . A logic flaw vulnerability exists in Ruoyi Management System. An attacker can use auto-populated account passwords to log in to the backend and obtain sensitive information...

SQL Injection Vulnerability in KTO's Fully Intelligent Parking Video Charging System (CNVD-2021-08478)

Xiamen KTO Communication Technology Co., Ltd. is a static transportation system solution provider. A SQL injection vulnerability exists in KTO's fully intelligent parking video charging system, which can be exploited by attackers to obtain sensitive information from the database...

Heap Out-of-Bounds Read Vulnerability in MP3Gain

MP3Gain is audio standardization software tool. MP3Gain suffers from a heap out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information...

Logic flaw vulnerabilities in the Jinhe collaborative management platform

Beijing Jinhe Network Co., Ltd. is a company that specializes in information networks. A logic flaw vulnerability exists in the Jinhe collaborative management platform, which can be exploited by attackers to obtain sensitive information...

Shenzhen Yuanmeng Cloud Technology Co., Ltd. WeiPHP 5.0 suffers from a logic flaw vulnerability

weiphp is a microsoft development platform which is based on oneThink, a content management framework. Shenzhen Yuanmeng Cloud Technology Co. Ltd WeiPHP 5.0 has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Panmicro e-office (CNVD-2021-06631)

Panmicro e-office office is a standard collaborative mobile office platform under Panmicro. A SQL injection vulnerability exists in Panmicro e-office, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2021-1239 Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerabilities exist because the...

Weak Password Vulnerability in ShareWAF New Generation Active Defense WAF from Shanxi Wochdog Technology Co.

ShareWAF Next Generation Active Defense WAF is an innovative WAF product. ShareWAF New Generation Active Defense WAF from Shanxi Wochdog Technology Co., Ltd. suffers from a weak password vulnerability. An attacker can log into the system with this username and password to obtain sensitive...

Logical flaws exist in the comprehensive information management platform of vocational schools of Sichuan Wanbo Education Software Co.

Sichuan Wanbo Education Software Company Limited was founded on February 16, 2015 . The company's business scope includes: the following scope does not include pre-licensed items, post-licensed items with permits or approval documents software and information technology services, social and...

Weak Password Vulnerability in RG-NBR of Riptide Networks

RG-NBR series is an Internet behavior management router from Ruijie, which is designed for office full scenarios. A weak password vulnerability exists in the RG-NBR, which can be exploited by an attacker to log into the backend to obtain sensitive information...

SQL injection vulnerability in yycms movie and TV system V2.3 admin directory yycms_list.php file

yycms is a movie and television system. yycms film and television system V2.3 version admin directory yyli.php file SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in YouYi cms ac***.php File

Youyi cms is a movie and TV station building system. A SQL injection vulnerability exists in the YouYi cms ac.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...