Adobe Creative Cloud Desktop Application Backlink Vulnerability (NVD-C-2020-154995)

Adobe Creative Cloud Desktop Application is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial...

CVE-2020-1350

creationtimestamp| type| source ---|---|--- 2020-07-14 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2020/07/july-2020-security-update-cve-2020-1350-vulnerability-in-windows-domain-name-system-dns-server/ 2020-07-14 18:51:05+00:00| published-proof-of-concept|...

The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to read arbitrary messages within the AI system.

The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to read arbitrary messages within the AI system remotely...

Palo Alto Networks PAN-OS OS Command Injection Vulnerability (CNVD-2021-22171)

PAN-OS is an operating system designed specifically for security and control of Palo Alto Networks firewalls, with extensive firewall, management and network features. An OS command injection vulnerability exists in the Palo Alto Networks PAN-OS management interface. An attacker could exploit thi...

CVE-2020-12016

Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 have hard-coded administrative account...

SQL Injection Vulnerability in Website Building System of Zibo Xu Ran Network Technology Co.

Zibo Xuran Web Technology Co., Ltd. is a high-end web design company that provides full branding services. There is a SQL injection vulnerability in the website system of Zibo Xuran Network Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

Information disclosure

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 178181...

ArticaTech Artica Proxy Operating System Command Injection Vulnerability

ArticaTech Artica Proxy is an open source Artica proxy solution from the French company ArticaTech. An operating system command injection vulnerability exists in versions prior to ArticaTech Artica Proxy 4.30.000000 Community Edition. The vulnerability arises from a network system or product not...

Limdu Operating System Command Injection Vulnerability

Limdu is a machine learning framework for Node.js by Erel Segal-Halevi Software Developers. An operating system command injection vulnerability exists in the 'trainBatch' function in versions of Limdu prior to 0.95. The vulnerability stems from a network system or product not properly filtering...

Shijiazhuang Cool Arts Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shijiazhuang Cool Arts Network Technology Co., Ltd. is a marketing-oriented Internet enterprise specializing in engaging in corporate website construction. Shijiazhuang City Cool Arts Network Technology Co., Ltd. building system there are SQL injection vulnerabilities, attackers can use the...

Weak Password Vulnerability in CMCC Tietong Yu Routing

CMCC Intelligent Products Branch is a branch of CMCC specializing in intelligent manufacturing, intelligent integration and intelligent operation. A weak password vulnerability exists in CMCC Tietong Yu Route, which can be exploited by attackers to log into the system backend...

Google Android System elevation of privilege vulnerability (CNVD-2020-32931)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10. The vulnerability can be exploited by an attacker to elevate privileges...

Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-32928)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by attackers to obtain sensitive information...

Google Android System Component Elevation of Privilege Vulnerability (CNVD-2020-33231)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in the System component of Android version 10, which can be exploited by an attacker to elevate privileges...

Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-32929)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by attackers to obtain sensitive information...

Google Android System elevation of privilege vulnerability (CNVD-2020-32934)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10. The vulnerability can be exploited by an attacker to elevate privileges...

AdRotate < 5.8.4 - Authenticated SQL Injection

Authenticated SQL injection in the AdRotate 5.8.3.1 exists via param "id". However, this requires an admin privileged user. NOTE: The plugin author mistook this SQLi bug for XSS but the remedy remains OK. Param "id" is vulneable to SQL Injeciton. Example 1:...

File Upload Vulnerability in Aiwo Real Estate System

Love nest real estate system is based on the second development of the intimate cat v4.7, specifically for the real estate industry customized set of systems. There is a file upload vulnerability in AiWo Real Estate System, which can be exploited by attackers to gain control of the web server...

SQL Injection Vulnerability in the Website Building System of Hainan Creative Future Culture and Media Co.

Hainan Creative Future Culture Media Co., Ltd. is an excellent enterprise engaged in brand one-stop website construction services. Hainan Creative Future Culture Media Co., Ltd. station building system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitiv...

CVE-2020-10030

An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker with enough privileges to change the system's hostname to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname does not...