Denial of Service Vulnerability in ABBYY FineReader (CNVD-2021-30852)

ABBYY FineReader is an all-in-one OCR and PDF software application. ABBYY FineReader suffers from a denial of service vulnerability. An attacker can exploit the vulnerability to cause the program to crash...

Aprelium Abyss Web Server Out-of-Bounds Read Vulnerability

Aprelium Abyss Web Server is a web server from the Tunisian company Aprelium. A security vulnerability exists in Aprelium Abyss Web Server X1 version 2.12.1 and version 2.14, which can be exploited by an attacker to potentially cause an out-of-bounds read via an HTTP request, which could result i...

Microsoft Windows and Windows Server Elevation of Privilege Vulnerability (CNVD-2021-34472)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the RPC Endpoint Mapper Service in...

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-29060)

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited by an attacker to achieve remote code execution...

OpenIAM Remote Code Execution Vulnerability

OpenIAM is a fully integrated identity and access management platform. A remote code execution vulnerability exists in OpenIAM versions prior to 4.2.0.3. An attacker can exploit this vulnerability to execute arbitrary code via Groovy Script...

Devolutions Server Information Disclosure Vulnerability

Devolutions Server is a local management solution that helps organizations control access to privileged accounts and business user passwords. An information disclosure vulnerability exists in Devolutions Server versions prior to 2020.3, which can be exploited by an attacker to obtain sensitive...

Devolutions Server Cross-Site Scripting Vulnerability

Devolutions Server is a local management solution that helps organizations control access to privileged accounts and business user passwords. A cross-site scripting vulnerability exists in Devolutions Server versions prior to 2020.3 in entries of type "Document", which can be exploited by an...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2021-25375)

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site scripting vulnerability exists in CMS Made Simple 2.2.15. The vulnerability can be exploited via /admin/addbookmark.php via Site Admin My Preferences Title field ...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25990)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

Linux kernel denial of service vulnerability (CNVD-2021-28688)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Etherne...

Information Disclosure Vulnerability in RG-UAC Ruijie Unified Internet Behavior Management and Auditing System

RG-UAC is a self-developed Internet behavior management and auditing product developed by StarNet Ruijie Networks Co., Ltd. It is deployed at key nodes of the network in routing, transparent, bypass or hybrid modes to conduct comprehensive inspection and analysis of data at layers 2-7. The RG-UAC...

SEO Panel Cross-Site Scripting Vulnerability (CNVD-2021-23384)

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in SEO Panel version 4.8.0. An attacker can exploit this vulnerability to inject JavaScript via the reporttype parameter in archive.php...

SQL Injection Vulnerability in SongCMS PHP Version of Guangdong Kegel Technology Limited (CNVD-2021-24954)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A SQL injection vulnerability exists in the PHP version of SongCMS by Guangdong Kager...

Linux kernel denial of service vulnerability (CNVD-2021-23796)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in nttyreceivecharspecial in drivers/tty/ntty.c in Linux kernel versions pri...

CVE-2018-14009

creationtimestamp| type| source ---|---|--- 2021-03-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49705 2021-09-21 06:42:52+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/98 2025-09-17 15:00:06+00:00| published-proof-of-concept|...

Concrete CMS Cross-Site Scripting Vulnerability

Concrete CMS is an open source content management system CMS for publishing content on the World Wide Web and intranet. A cross-site scripting vulnerability exists in Concrete CMS versions prior to 8.5.5. A remote authenticated user can exploit this vulnerability via a specially crafted survey...

Unspecified vulnerability in GLPI (CNVD-2021-17773)

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

Google Android elevation of privilege vulnerability (CNVD-2021-24922)

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from a privilege bypass in the getMediaOutputSliceAction of RemoteMediaSlice.java. An attacker...

Google Android elevation of privilege vulnerability (CNVD-2021-24924)

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from a code logic error in CrossProfileAppsServiceImpl.java, which results in the application's...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2021-15048)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An information disclosure vulnerability exists in versions of Mozilla Firefox prior to 85. An attacker could exploit this vulnerability to steal sensitive information...