Htek UC902 VoIP phone Buffer Overflow Vulnerability

Htek UC902 VoIP phone is an IP phone from China Hanlong Technology Htek. A buffer overflow vulnerability exists in the web management interface in the Htek UC902 VoIP phone using firmware version 2.0.4.4.46. The vulnerability originates when a network system or product performs operations on memo...

Rockwell Automation PanelView 5510 Access Control Error Vulnerability

Rockwell Automation PanelView 5510 is a graphic terminal device from Rockwell Automation. An access control error vulnerability exists in the PanelView 5510 manufactured before 2019-3-13. The vulnerability stems from a network system or product not properly restricting access to resources from...

xss vulnerability in shuipfcms

ShuipFCMS is a content management system based on ThinkPHP framework as the core, using the independent grouping approach to development. Shuipfcms has an xss vulnerability. Attackers can use this vulnerability to obtain administrator cookies...

F5 BIG-IP PEM Input Validation Error Vulnerability

F5 BIG-IP PEM is a policy enforcer used in BIG-IP from F5 USA. An input validation error vulnerability exists in F5 BIG-IP PEM, which can be exploited by an attacker to cause traffic processing interruptions...

Tenda W20E V15.11.0.6_CN has a command execution vulnerability (CNVD-2019-22869)

Shenzhen Jixiang Tengda Technology Co., Ltd. is one of the first pioneers in the field of wireless network in China. Tenda W20E V15.11.0.6CN suffers from a command execution vulnerability that can be exploited by an attacker to gain server privileges...

xml entity injection vulnerability in ctcms version 2.0.2

Chongsheng Network Technology is an emerging network technology limited company. It has developed Cscms portal content management system, Ctcms network video education management system, polymerization payment, and a multi-merchant card issuance platform management system. ctcms2.0.2 version of t...

Henan Zhongyu Network Technology Company's website building system has xss vulnerability

Henan Zhongyu Network Technology Co., Ltd. is a high-tech company that provides informatization and networking solutions for enterprises, government agencies and individuals. There is an xss vulnerability in the website building system of Henan Zhongyu Network Technology Co. Attackers can use thi...

XnView Classic Buffer Overflow Vulnerability (CNVD-2019-22459)

XnView is a multi-platform software that supports image viewing, conversion and editing. A buffer overflow vulnerability exists in XnView Classic. No details of the vulnerability are available at this time...

Multiple Vulnerabilities in Shanghai Pangda's Academic Affairs System

Shanghai Pengda Computer System Development Co., Ltd. is a company dedicated to vocational education informatization solutions, products involved in education management, teaching applications, teaching services and other areas. There are multiple vulnerabilities in Shanghai Pangda's teaching...

vulscan

This is a Python-based web application for vulnerability scanning and management. The application is built using Django and has several features, including: 1. Vulnerability Scanning: The application can scan for vulnerabilities in web applications using a variety of plugins and tools. 2. Plugin...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2019-38770)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Hyper-V is one of the virtualization products that supports...

Multiple Schneider Electric Products Resource Management Error Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Arbitrary code execution vulnerability in zzzphp v1.6.6 backend (CNVD-2019-17280)

zzphp is a free website building system developed using PHP. A code execution vulnerability exists in the backend of zzzphp V1.6.6, which can be exploited by attackers to gain control of the web server...

Microsoft Internet Explorer Buffer Overflow Vulnerability (CNVD-2019-16204)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A buffer overflow vulnerability exists in Microsoft IE 11. The vulnerability originates when a network system or product performs an operation in memory without proper...

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2019-19838)

Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. A memory misreference vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

WellCMS X has an xss vulnerability

WellCMS X is a mobile-oriented content management product. An xss vulnerability exists in WellCMS X, which can be exploited to inject arbitrary web script or HTML...

Foxit Reader Privilege Access Control Vulnerability

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A privilege access control vulnerability exists in version 3.1.0.0111 of Foxit Reader for the macOS platform. The vulnerability stems from a lack of effective permission and access control measures on a networked system or...

JeeWeb login logs have xss vulnerability

JeeWeb is an agile development system based on SpringBoot 2 + Spring + Mybatis + Hibernate . An xss vulnerability exists in the JeeWeb login log, which can be exploited by an attacker to obtain an administrator cookie...

schneider Proclima suffers from dll hijacking vulnerability

schneider Proclima is a thermal calculation software. A dll hijacking vulnerability exists in schneider Proclima. An attacker can load a malicious dll and execute malicious code...

SQL injection vulnerability in the ch***.asp file of the enterprise website management system of Dynamic Science (CNVD-2019-13589)

Dynamic enterprise website management system is an asp + access for the development of enterprise website source code. There is a SQL injection vulnerability in the ch.asp file. An attacker can exploit the vulnerability to obtain sensitive information from the database...