Vulnerabilities fixed in F5 BIG-IQ

F5 has fixed vulnerabilities in BIG-IQ. A malicious person at remote can exploit the vulnerabilities to perform a Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser used to visit the application being visited. In addition, a malicious...

Weak Password Vulnerability in TopVPN 6000 by Skyrunner

Skyrise Technology Group Skyrise is a provider of network security, big data and security cloud services. A weak password vulnerability exists in Tianrongxin TopVPN6000. Attackers utilize the vulnerability to log into the backend and obtain sensitive information...

Weak Password Vulnerability in Qixing Tianqing Hanma USG Firewall

Tianqing HANMAR USG Firewall is developed based on Qixing ISE unified engine, there is no OEM from third-party functions, and the functions can be split in any combination, which has very little impact on the system performance. There is a weak password vulnerability in Qisda Tianqing Hanma USG...

Microsoft SharePoint Server Information Disclosure Vulnerability (CNVD-2021-25708)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

CVE-2021-21190

Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

Weak Password Vulnerability in RG-UAC Devices of Riptide Networks

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A weak password vulnerability exists in the RG-UAC device of Ruijie...

SQL Injection Vulnerability in Runge Marking System of Chengdu Runge Unlimited Technology Co.

Chengdu R&G Unlimited Technology Co., Ltd. was founded on June 07, 2013, the company was mainly engaged in cross-platform 3D game engine research and development at the beginning of the company's business, after nearly a few years of technological precipitation of the company is currently engaged...

Weak Password Vulnerability in Atech Network Management System (CNVD-2021-23505)

Ltd. is a small and medium-sized network solution provider and service provider in China. A weak password vulnerability exists in the Atech Network Management System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Ruoyi Management System

Ruoyi management system is based on SpringBoot2.0 permissions management system, the core technology using SpringBoot, MyBatis, Shiro, Thymeleaf, Bootstrap, Vue and so on. The system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information fr...

SQL Injection Vulnerability in Intelligent Internet of Things System of Nanjing Jiuzhe Software Technology Co.

JiuZe Technology is a mobile Internet customized software service provider, providing enterprise customers with one-stop mobile Internet solutions from product planning, conceptual design to software delivery, operation and promotion. SQL injection vulnerability exists in the intelligent Internet...

Arbitrary File Read Vulnerability in SPAdmin

SPAdmin is a backend management system can be quickly developed , integrated with rich third-party APP , the core technology SpringBoot, JPA, Shiro. SPAdmin has an arbitrary file read vulnerability, attackers can use this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in T1 of Shipment 100 Virtual Goods Autoship System (CNVD-2021-21567)

Shipment 100-Virtual Goods Auto Shipment System is a powerful virtual goods automatic shipment system/article pay to read the system, without human guards, customers can buy online to automatically complete the transaction. It supports out-of-stock reminders/quick login/recycling bin/no-login...

Weak Password Vulnerability in TP-LINK Archer C5

Archer C5 is a wireless router product. A weak password vulnerability exists in TP-LINK Archer C5. An attacker can exploit the vulnerability to log into the system backend and obtain sensitive information...

Advantech Spectre RT ERT351 Cross-Site Scripting Vulnerability

The Advantech Spectre RT ERT351 is a router from Advantech USA providing network routing capabilities. The Advantech Spectre RT ERT351 error response handling suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or...

Weak Password Vulnerability in FW1000 Series Firewalls of Hangzhou Dipu Technology Co.

Hangzhou Dipu Technology Co., Ltd "Dipu Technology" is a high-tech listed enterprise integrating R&D, production and sales. A weak password vulnerability exists in the FW1000 series firewall of Hangzhou Dipu Technology Co. An attacker can use this vulnerability to log into the backend and obtain...

SQL Injection Vulnerability in the Home Furnishing ERP Management System of Shanghai Furnishing Alliance Information Technology Co.

Home furnishing ERP management system can make the company's pre-sale and after-sale customer resource management more standard, standardized, humanized, maximize the exploitation of customer service value, enhance the company's maximum customer service value. There is a SQL injection vulnerabili...

SQL Injection Vulnerability in Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Home furnishing ERP management system can make the company's pre-sale and after-sale customer resource management more standard, standardized, humanized, maximize the exploitation of customer service value, enhance the company's maximum customer service value. There is a SQL injection vulnerabili...

SQL Injection Vulnerability in Water Rights Trading System (CNVD-2021-18288)

Tangshan Liulin Automation Equipment Co., Ltd. is a high-tech enterprise specializing in the research and development, production, sales and system engineering technical services of Internet of Things security communication terminal and intelligent application platform software. There is a SQL...

Weak Password Vulnerability in RG-RSR Series Routers

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A weak password vulnerability exists in RG-RSR series routers, which can b...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16411)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...