MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16411)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2021-13207)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

Weak Password Vulnerability in EBG2800 Enterprise Business Gateway Management System of ZTE Corporation

ZTE Corporation is a leading global provider of integrated communications solutions. A weak password vulnerability exists in the EBG2800 Enterprise Business Gateway management system of ZTE Corporation, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. There is a SQL injection vulnerability in the Home Decoration ERP Management System of Shanghai Decoration Alliance Information Technology Co., Ltd, which can be exploited by attackers ...

Directory Traversal Vulnerability in Video Coding Equipment Access Gateway of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a provider of security products and industry solutions. Ltd. video coding equipment access gateway directory traversal vulnerability, an attacker can use the vulnerability to traverse the device all directories and files to obtain sensitive...

Weak Password Vulnerability in Intelligent Park Integrated Management Platform of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in the intelligent park integrated management platform of Zhejiang Dahua Technology Co. An attacker can use this vulnerability to connect...

Weak Password Vulnerability in Riptide Networks NBR WEB Management System

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A weak password vulnerability exists in the NBR WEB management system of Ruijie...

Catalog Traversal Vulnerability in Corto's Fully Intelligent Parking Payment System

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A directory traversal vulnerability exists in KOTO's fully intelligent parking charging system, which can be exploited by attacke...

IBM Security Verify Information Queue Information Disclosure Vulnerability (CNVD-2021-11361)

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. An information disclosure vulnerability exists in IBM Security Verify Information Queue. The vulnerability stems from...

Weak Password Vulnerability in Founder Firewall WEB Login

Founder Group was invested and founded by Peking University in 1986. Academician Wang Xuan was the technical decision maker and founder of Founder Group, and his invention of Chinese character laser phototypesetting technology laid the foundation of Founder Group. A weak password vulnerability...

Weak Password Vulnerability in SANYO Cameras

sanyo generally refers to Sanyo. Sanyo English name: SANYO, a large Japanese conglomerate with a history of 60 years, is headquartered in Osaka, Japan, and its products cover a wide range of fields, including monitors, cell phones, digital cameras, machinery, and biopharmaceuticals. A weak passwo...

Weak password vulnerability in tantos series cameras

Ltd., committed to the research and development of video surveillance technology, to provide users with humanized video surveillance solutions. tantos series camera has a weak password vulnerability, attackers can use the vulnerability to obtain sensitive information...

Cross site scripting

A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected service. The vulnerability is due to insufficient validation of user-supplied...

Wenzhou Yougu Technology Co., Ltd. website building system has SQL injection vulnerabilities (CNVD-2021-16395)

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Technology Co., Ltd. station building system there is a SQL injection vulnerability, th...

Weak password vulnerability in H3C-ER3100

The H3C-ER3100 is a router from H3C. A weak password vulnerability exists in the H3C-ER3100, which can be exploited by an attacker to log into the backend of the router to obtain sensitive information...

Zero Takeoff Customer Relationship Management System suffers from SQL Injection Vulnerability

Chengdu Zero Takeoff Network is an information service provider, mainly dedicated to the Internet basic business, website construction, management system, software customization, optimization and promotion, e-commerce operations and other full range of information technology services. Zero Takeof...

Weak password vulnerability in Haofeng firewall system (CNVD-2021-14503)

Shenzhen Haofeng Communication Technology Co., Ltd. business scope: computer software, hardware, network products, technology development and purchase and sale, other domestic business, material supply and marketing industry. There is a weak password vulnerability in Haofeng's firewall system,...

CVE-2021-21137

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...

SQL Injection Vulnerability in Website Building System of Jingzhou Huacheng Network Information Technology Co. Ltd (CNVD-2021-14437)

Jingzhou Huacheng Network Information Technology Co., Ltd. is a set of website planning and construction, network optimization and promotion, software research and development, hotel management system agent sales as well as large-scale website operation and other projects as one of the profession...

Logic Flaw Vulnerability in ZZCMS (CNVD-2021-14555)

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS has a logic flaw vulnerability , attackers can use the vulnerability to obtain sensitive information , t...