Easy B2C Mall System d***.php file exists arbitrary SQL statement execution vulnerability

Easy B2C mall system is a mall system based on open source framework development. Easy B2C mall system d.php file exists arbitrary SQL statement execution vulnerability. An attacker can exploit the vulnerability to execute arbitrary SQL statements within the file...

Weak password vulnerability in behavioral management system of Shenzhen Tengxu IOT Technology Co.

Shenzhen Tengxu IOT Technology Co., Ltd. is an Internet technology company integrating R&D, design, manufacture, sales and service of commercial wireless network products. There is a weak password vulnerability in the behavior management system of Shenzhen Tengxu IOT Technology Co. Attackers can...

CVE-2020-3302

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to overwrite files on the file system of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

CVE-2020-3309 Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability

A vulnerability in Cisco Firepower Device Manager FDM On-Box software could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation. An attacker could exploit this...

Google Android System elevation of privilege vulnerability (CNVD-2020-27126)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android 9 and 10. An attacker can exploit this vulnerability to elevate privileges...

LCDS LAquis SCADA Information Disclosure Vulnerability (CNVD-2020-25541)

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. An information disclosure vulnerability exists in LCDS LAquis SCADA version...

Operating System Command Injection Vulnerability in Multiple NETGEAR Products

NETGEAR R6700 and others are products of NETGEAR, Inc.NETGEAR R6700 is a wireless router.NETGEAR D7800 is a wireless modem.NETGEAR R6900 is a wireless router.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless modem.NETGEAR R6900 is a wireless router...

Buffer overflow vulnerability in multiple NETGEAR products (CNVD-2021-50924)

The NETGEAR WAC505 and others are a wireless access point AP from NETGEAR. A buffer overflow vulnerability exists in multiple NETGEAR products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting in a...

Command Injection Vulnerability in Multiple NETGEAR Products (CNVD-2021-50928)

NETGEAR EX7000 and others are products of NETGEAR Corporation.NETGEAR EX7000 is a wireless network signal extender.NETGEAR R8500 is a wireless router.NETGEAR D6400 is a wireless modem.NETGEAR R8500 is a wireless router.NETGEAR R8500 is a wireless router.NETGEAR R8500 is a wireless router.NETGEAR...

Universal Password Bypass Vulnerability in Driving School Management System V5.0 of Beijing 1039 Technology Development Co.

Beijing 1039 Technology Development Co., Ltd. is a focus on driving school management system, driving school mobile office system, driving school management software, driving school enrollment program development, etc., for the driving school to provide a dead-end driving school management system...

Buffer overflow

A buffer overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitrary code execution on a system running it...

CVE-2020-7081

A type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitary code read/write on the system running it...

IBM QRadar SIEM Access Control Error Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An access control...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS. The vulnerability exists as a deadlock flaw was found in the Linux kernel splice implementation. This deadlock could occur during interactions between the genericfilesplicewrite and splicefrompipe functions, possibly leading to a partial denial of...

Unauthorized Access Vulnerability in Website Building System of Qinhuangdao Shangjing Technology Co. Ltd (CNVD-2020-24435)

Qinhuangdao Shangjing Technology Co., Ltd. is a high-tech enterprise. Qinhuangdao Shangjing Technology Co., Ltd. building system has an unauthorized access vulnerability, which can be exploited by an attacker to view and change the administrator's password access...

Google Android System Out-of-Bounds Write Vulnerability (CNVD-2020-24774)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in the System component of Android. The vulnerability can be exploited by an attacker to execute code...

Easy B2C Mall System V1.1 Exists Arbitrary File Deletion Vulnerability

Easy B2C mall system is a mall system based on open source framework development. Easy B2C Mall System V1.1 exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete any directory...

SQL Injection Vulnerability in Easy B2C Mall System V1.1 pr***.php Page

Easy B2C mall system is a mall system based on open source framework development. Easy B2C Mall System V1.1 pr.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Arbitrary Code Execution

dovecot is vulnerable to arbitrary code execution. A buffer overflow vulnerability in the indexer-worker process allows an attacker to execute arbitary code on the system...

CVE-2019-19606

X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths or a leak of OS credentials to a remote system via crafted network packets. This could be used to execute arbitrary commands on the system...