SQL Injection Vulnerability in CupCMS

CupCMS is a content management system that integrates video, stars, news, comics, community and more. CupCMS suffers from a SQL injection vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in S-CMS Enterprise Website Building System (CNVD-2020-65194)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a file upload vulnerability in S-CMS, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in CRMEB Knowledge Payment System Backend

CRMEB based on ThinkPhp5.0 + Vue + EasyWeChat development of a CRMEB new retail mall system. A file upload vulnerability exists in the backend of CRMEB Knowledge Payment System, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in Swift Text-to-Speech Software

Swift Text to Speech Software is a speech synthesis software that converts text to speech. It is suitable for a variety of scenarios such as shopping mall store advertisements, audio production, audible reading and so on. A command execution vulnerability exists in Swift Text to Speech Software,...

CVE-2020-14760

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Command Execution Vulnerability in Apabi Reader (Windows Client)

Apabi Reader is a domestic free non-open source e-books and electronic documents reading software, is the only reader of CEBX, CEB documents, and can be used to read PDF, HTM, HTML format documents. A command execution vulnerability exists in Apabi Reader Windows client, which can be exploited by...

Command Execution Vulnerability in Deli PDF Converter Windows Client

Xiamen Esaote Software Technology Co., Ltd. is a professional tool software provider, with a professional R & D and technical support team, software users in many countries and regions around the world. A command execution vulnerability exists in the windows client of Deli PDF Converter. An...

Command Execution Vulnerability in the Standard Edition of Xunjie CAD Editor

Xunjie CAD Editor Standard Edition is an application for drawing DWG format file editing software, mainly for DWG, DXF and other file formats drawings to provide browsing, editing functions. A command execution vulnerability exists in XunJie CAD Editor Standard Edition, which can be exploited by ...

Command Execution Vulnerability in Fast Camel Accelerator (Windows Client)

Fast Camel Accelerator is a cross-border product of Wenzhou Yuntong Numerical Network Technology Co. The product can facilitate the user to quickly connect to the overseas private network, to meet the user to access the huge amount of information material, targeted acceleration for specific sites...

CVE-2020-14773

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14809

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14845

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14799

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2020-14786

Removed by vendor...

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59410)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in PDF Reader on Cloud

Cloud PDF Reader is a PDF reading and editing software. A command execution vulnerability exists in PDF Reader on Cloud, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in NetEase Email Master PC Client Software

Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports all-platform device login. Netease Email Master pc client software has a command execution vulnerability that can b...

Command Execution Vulnerability in CAJViewer of China Academic Journals (CD-ROM Version) Electronic Magazine Company Limited (CNVD-2020-61894)

CAJViewer is a specialized viewer for reading and editing literature in the CNKI series of databases. A command execution vulnerability exists in CAJViewer of China Academic Journals CD-ROM Version Electronic Magazine Co. Ltd. that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in BayCloud CMS

Beyun cms content management system is an open source content management system based on tp5.1. Beyuncms has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in YouDianCMS v9.0

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS v9.0 has a file upload vulnerability, which can be exploited by attackers to gain...