1092 matches found
Command Execution Vulnerability in Youyou Firewall Gateway Management System (CNVD-2020-73281)
Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...
Binary Vulnerability in Sitronix Wireless Controller
Wuhan Cetron Cetron Technology Co., Ltd Cetron is a high-tech innovative enterprise focusing on the design and development of smart home products. A binary vulnerability exists in the Cetron Wireless Controller. An attacker can exploit this vulnerability to gain control of the server...
Binary Vulnerability in Huaxin Aotom HAN Series Smart Wireless AP Devices
Beijing Huaxin Aotian Network Technology Co., Ltd. was registered in Haidian Branch on 2015-10-13. Legal representative Liu Jun, the company's business scope includes technology development, technology promotion, technology transfer, technology consulting, technical services and so on. A binary...
File Upload Vulnerability in Website Building System of Beijing Zhongcheng Kexin Technology Development Co.
Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a leading travel industry chain service provider with high market share in China. There is a file upload vulnerability in the website building system of Beijing Zhongcheng Kexin Technology Development Co., Ltd, which can be exploited by...
Command Execution Vulnerability in Kingsoft V8+ Terminal Security System
Kingsoft V8+ Terminal Security is a security software for enterprise-level users. A command execution vulnerability exists in Kingsoft V8+ Terminal Security System, which can be exploited by attackers to gain control of a server...
MangoTV PC client suffers from dll hijacking vulnerability
Mango TV is a new media audio-visual comprehensive communication service platform with audio-visual interaction as its core, integrating network features and TV features, realizing "multi-screen integration" of exclusive broadcasting, cross-screen and self-producing, and it is also the only...
GBase 8s database suffers from a local boost vulnerability (CNVD-2020-69447)
GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database has a local privilege vulnerability, which can be exploited by an attacker to gain control of the server...
Sentrifugo Code Issue Vulnerability
Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A security vulnerability exists in Sentrifugo version 3.2, which is caused by a user being able to upload images unde...
ZDCC VisualField suffers from localized power lifting vulnerability
VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. ZDCC VisualField is vulnerable to a local power lifting vulnerability that can be exploited by an attacker to gain control of the server...
UCMS suffers from a file upload vulnerability (CNVD-2020-69467)
UCMS is a content management system written in PHP. UCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...
Command execution vulnerability in Zendo Enterprise 4.0.3 backend
Zendo Enterprise is a project management software. A command execution vulnerability exists in the backend of Zendo Enterprise Edition 4.0.3, which can be exploited by attackers to gain control of the server...
File Upload Vulnerability in LzCMS Content Management System Backend
LzCMS is a blog system developed by ThinkPHP+layui. A file upload vulnerability exists in the background of LzCMS content management system, which can be exploited by attackers to gain control of the web server...
HadSky Light Forum program has a file upload vulnerability
HadSky Light Forum program is a personal original PHP system. The HadSky Light Forum program has a file upload vulnerability that can be exploited by attackers to gain control of the server...
File upload vulnerability in duxcms content management system backend (CNVD-2020-68884)
duxcms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. duxcms content management system backend file upload vulnerability, attackers can use the vulnerability to obtain server administrative privileges...
Victor CMS suffers from file upload vulnerability (CNVD-2020-67324)
Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...
Victor CMS suffers from a file upload vulnerability (CNVD-2020-67388)
Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...
Victor CMS suffers from a file upload vulnerability (CNVD-2020-67325)
Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...
Zunyi Xintengda Information Technology Co., Ltd. Bole Card Issuing System Basic Edition Arbitrary File Upload Vulnerability
Zunyi Xintengda Information Technology Co., Ltd. is a professional e-commerce operation and network marketing services company. Zunyi Xintengda Information Technology Co., Ltd. Bole hair card system basic version of arbitrary file upload vulnerability, an attacker can use the vulnerability on the...
CVE-2020-26820
SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, to expose unauthenticated access to the file system and upload a malicious file. The attacker or another user can then use a separate...
