Access Control Specialist of Shenzhen Weikeng Industry Co., Ltd. has a logic flaw vulnerability

Shenzhen Weikeng Industrial Co., Ltd. is a professional manufacturer and developer of access control systems, access control equipment and access control software in China. There is a logic flaw vulnerability in the Access Control Expert of Shenzhen Weikeng Industrial Co. Ltd, which can be...

Dell Wyse Management Suite 安全漏洞

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes features such as centralized management of Wyse endpoints, asset tracking and automated device discovery. A security vulnerability exists in Wyse Management Suite in Dell,...

Logic Flaw Vulnerability in ZZCMS Backend

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS back-end logic flaws vulnerabilities. Attackers can use the vulnerability to perform unauthorized...

Weak Password Vulnerability in NETGEAR WNR2000v4 Routers

The NETGEAR WNR2000v4 router is a wireless router device. A weak password vulnerability exists in the NETGEAR WNR2000v4 router, which can be exploited by an attacker to compromise the device, obtain sensitive information, and perform unauthorized operations...

NETGEAR WNR2000v3 Router Has Weak Password Vulnerability

The NETGEAR WNR2000v3 router is a wireless router device. A weak password vulnerability exists in the NETGEAR WNR2000v3 router, which can be exploited by an attacker to compromise the device, obtain sensitive information, and perform unauthorized operations...

Weak Password Vulnerability in Belkin's EA6900

The EA6900 is a Belkin router product. A weak password vulnerability exists in the Belkin EA6900, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

Weak password vulnerability in TP-LINK TL-WR843ND router

P&T Technologies Ltd. is a leading global provider of network communication equipment. A weak password vulnerability exists in the TL-WR843ND router, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

CVE-2021-21729

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0EG1T5TE, V2.5.5, ZXHN H108N V2.5.5BTMT1...

Samsung mobile devices 授权问题漏洞

Samsung mobile devices O and others are products of Samsung, South Korea.Samsung mobile devices O is a series of cell phones.Samsung mobile devices P is a series of mobile hard disk products.Samsung mobile devices is a cell phone Samsung mobile devices is a mobile phone application. A security...

Unspecified Vulnerability in Samsung Mobile MobileWips

Samsung Mobile MobileWips is an application from Samsung Mobile, a South Korean company. It provides an application that comes with Samsung cell phones. A security vulnerability exists in SMR Feb-2021 Release 1 that allows unauthorized operations, including denial-of-service attacks, by hijacking...

Samsung SMR 安全漏洞

Samsung Mobile MobileWips is an application from Samsung Mobile, a South Korean company. It provides an application that comes with Samsung cell phones. A security vulnerability exists in SMR Feb-2021 Release 1 that allows unauthorized operations, including denial-of-service attacks, by hijacking...

Logic Flaw Vulnerability in ZZCMS (CNVD-2021-14555)

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS has a logic flaw vulnerability , attackers can use the vulnerability to obtain sensitive information , t...

CVE-2020-14275

The CVE-2020-14275 entry concerns HCL Commerce, affecting versions 9.0.0.5–9.0.0.13, 9.0.1.0–9.0.1.14, and 9.1–9.1.4. It states potential denial of service, disclosure of user personal data, and the ability to perform unauthorized administrative operations. No root-cause, affected component/file,...

GaussDB Kernel: Controlling the Permission to Execute the SECURITY INVOKER Function

The SECURITY INVOKER function is executed with the permissions of the invoker. Before invoking a function not created by yourself, check the function content to prevent the function creator from performing unauthorized operations with your Permissions. Copyright C 2020 Greenbone Networks GmbH Som...

Unauthorized Access Vulnerability in Flying Fish Star Enterprise Intelligent Internet Behavior Management System

Chengdu Flying Fish Star Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network usage through innovative technologies, and cooperating with users to create an intelligent and...

Unauthorized Access Vulnerability in Yuexun Smart Education Cloud Platform

Yuexun Smart Education Platform is an educational software. An unauthorized access vulnerability exists in Yuexun Intelligent Education Cloud Platform. An attacker can exploit the vulnerability to log in unauthorized and perform unauthorized operations...

CVE-2020-10746

A flaw was found in Infinispan org.infinispan:infinispan-server-runtime version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the caches, including the creation, update, deletion...

Mozilla Rust Resource Management Error Vulnerability (CNVD-2021-30575)

Rust is a general-purpose, compiled programming language. A resource management error vulnerability exists in Mozilla Rust version 0.6.2, which stems from a memory safety issue that occurs with insert in the Chunk implementation and can be exploited by an attacker to perform unauthorized operatio...

CVE-2020-13946

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and...

IBM Event Streams Authorization Issues Vulnerability

IBM Event Streams is a set of event streaming platform based on Apache Kafka project from IBM, USA. The platform is mainly used for Apache Kafka deployment, authentication and encrypted communication and other functions. An authorization issue vulnerability exists in the schema registry in IBM...