CVE-2024-32324

Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows a local attacker to execute arbitrary code via the vpnclientip variable of the configvpnpptp function in rc program...

CVE-2024-32324

Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows a local attacker to execute arbitrary code via the vpnclientip variable of the configvpnpptp function in rc program...

CVE-2024-32324: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows a local attacker to execute arbitrary code via the vpnclientip variable of the configvpnpptp function in rc program...

Information Leakage Vulnerability in KingH5Stream System of Beijing Asian Control Technology Development Co.

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of industrial automation and informatization software platform. There is an information leakage vulnerability in KingH5Stream system of Beijing Asian Control Technology Development Co. Ltd, which can be exploited by...

AC8 R7WebsSecurityHandler function has a stack buffer overflow vulnerability in Shenzhen Jixiang Tengda Technology Co.

Shenzhen Jixiang Tengda Technology Co., Ltd AC8 is a wireless router device that provides network connection and wireless management functions. A stack buffer overflow vulnerability exists in the R7WebsSecurityHandler function in the Shenzhen Jixiang Tengda Technology Co. AC8 /goform/execCommand...

Unauthorized Access Vulnerability in KingH5Stream of Beijing Asian Control Technology Development Co.

Beijing Asian Control Technology Development Co., Ltd. is an industrial automation and informationization software platform high-tech enterprise founded in 1997, headquartered in Beijing, China, focusing on domestic industrial software independent research and development, marketing and services...

Command Execution Vulnerability in Micro Service Platform of Puyuan Information Technology Co.

Puyuan Information Technology Co., Ltd. is a professional provider of software infrastructure platform middleware in China, mainly providing innovative and reliable software infrastructure platform products and corresponding technical services for customers in the financial, governmental affairs,...

SQL Injection Vulnerability in Ruiyou Tianyi Application Virtualization System of Xi'an Ruiyou Information Technology Information Co. Ltd (CNVD-2024-23827)

Ruiyou Tianyi Application Virtualization System is a domestic application virtualization platform with independent intellectual property rights, which is based on Server-based Computing. Xi'an Ruiyou Information Technology Co., Ltd. Ruiyou Tianyi Application Virtualization System suffers from a S...

Arbitrary File Download Vulnerability in Intelligent Park Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2024-23621)

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. Zhejiang Dahua Technology Co., Ltd. intelligent park integrated management platform has an arbitrary file download vulnerability, which can be exploited by...

Command Execution Vulnerability in Raisecom iSDC of Raisecom Technology Development Co.

Risecomm Technology Development Co., Ltd. is a provider of optical network products and system solutions. A command execution vulnerability exists in Raisecom iSDC, which can be exploited by attackers to gain server privileges...

JSOutProx’s Latest Incarnation Strikes Fear in Financial Circles

...

CmsEasy security vulnerabilities

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou ET Technology CmsEasy. A security vulnerability exists in CmsEasy version 7.7.7.9, which stems from the presence of a code execution vulnerability...

JIZHICMS security vulnerabilities

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from China's Extreme Networks Technology. A security vulnerability exists in JIZHICMS version 2.5, which stems from the presence of a file upload vulnerability...

CVE-2024-21119

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

CVE-2024-21120

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

CVE-2024-21118

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

CVE-2024-21117

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

CVE-2024-20990

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite component: Templates. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

CVE-2024-20990

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite component: Templates. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

CVE-2024-21119

CVE-2024-21119 affects Oracle Outside In Technology (Outside In Core) within Oracle Fusion Middleware. Affected: Oracle Outside In Technology versions 8.5.6–8.5.7. Local authenticated attackers can gain update/insert/delete permissions and read access to data, with potential partial denial of ser...