schneider Proclima suffers from dll hijacking vulnerability

schneider Proclima is a thermal calculation software. A dll hijacking vulnerability exists in schneider Proclima. An attacker can load a malicious dll and execute malicious code...

SQL injection vulnerability in the ch***.asp file of the enterprise website management system of Dynamic Science (CNVD-2019-13589)

Dynamic enterprise website management system is an asp + access for the development of enterprise website source code. There is a SQL injection vulnerability in the ch.asp file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL injection vulnerability in ne***.php file of DM website builder system

DM building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM website builder system ne.php file SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information...

WPA Privilege Access Control Issue Vulnerability

WPA is a set of Wi-Fi access protection schemes from the Wi-Fi Alliance USA, including security protocols and security authentication procedures. There is a security vulnerability in the implementation of WPA. An attacker can exploit the vulnerability to authenticate and gain access to the networ...

XSS Vulnerability in FishLeap CMS Frontend Comments List

Fish CMS is a content management system developed by the official Catfish CMS specifically for enterprise applications. An XSS vulnerability exists in the front-end comment list of FishCare CMS, which can be exploited by an attacker to obtain an administrator cookie...

Arbitrary file deletion vulnerability in Tongda OA system (CNVD-2019-12765)

Tongda OA 2017 version is an office software system. Tongda OA system has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...

Code Execution Vulnerability in EmpireCMS

EmpireCMS is based on B/S structure, secure, stable and flexible website management system. EmpireCMS there are code execution vulnerabilities , attackers can exploit the vulnerability of remote code execution , access to server privileges...

"an" App for iOS Directory Traversal Vulnerability

"an" App for iOS is an app. A directory traversal vulnerability exists in "an" App for iOS. A remote attacker can exploit this vulnerability to obtain arbitrary files...

Vulnerability of universal password login in the background of website building system of Guangzhou Yongtuo Information Technology Co.

Guangzhou Yongtuo Information Technology Co., Ltd. website building system is a website building system. There is a universal password login vulnerability in the background login page of Guangzhou Yongtuo Information Science and Technology Co...

Google Chrome Type Obfuscation Vulnerability (CNVD-2019-23326)

Chrome is a web browsing tool developed by Google. A type obfuscation vulnerability exists in V8 in versions prior to Google Chrome 73.0.3683.75. An attacker can exploit this vulnerability to perform out-of-bounds memory reads via a crafted HTML page...

GPON Router Authentication Stack Overflow Vulnerability

GPON Gigabit-Capable PON technology is the latest generation of broadband passive optical integrated access standard based on the ITU-TG.984.x standard. Gigabit-Capable PON GPON technology is the latest generation of broadband passive optical integrated access standard based on ITU-TG.984.x...

Moxa IKS and EDS Plaintext Password Storage Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. A plaintext password storage vulnerability exists in the Moxa IKS and EDS series. The vulnerability stems from a program storing passwords in plaintext form. An attacker could exploit this vulnerability to read sensitive...

Xiaomi perseus-p-oss MIX 3 integer overflow vulnerability

Xiaomi perseus-p-oss MIX 3 is a smartphone from Chinese company Xiaomi Technology Xiaomi. Xiaomi perseus-p-oss MIX 3 An integer overflow vulnerability exists in the sdeevtlogfilterwrite method of the drivers/gpu/drm/msm/sdedbg.c file in the Xiaomi perseus-p-oss MIX 3 on 2018-11-26 and earlier...

Huawei Mate20 Buffer Overflow Vulnerability

Huawei Mate20 is a smartphone from Chinese company Huawei Huawei. A buffer overflow vulnerability exists in previous versions of the Huawei Mate20 HMA-AL00C00B175, which stems from a failure to adequately validate user input and can be exploited by an attacker to cause a device anomaly...

Pompem - Exploit and Vulnerability Finder

Pompem is an open source tool, designed to automate the search for Exploits and Vulnerability in the most important databases. Developed in Python, has a system of advanced search, that help the work of pentesters and ethical hackers. In the current version, it performs searches in PacketStorm...

Microsoft Edge Buffer Overflow Vulnerability

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...

Binaryen Buffer Overflow Vulnerability (CNVD-2019-34839)

Binaryen is a compiler and toolchain infrastructure library written in C++. Binaryen suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause a denial of service with specially crafted input...

otfcc buffer overflow vulnerability

otfcc is a utility program for parsing and writing OpenType font files. A buffer overflow vulnerability exists in the lib/support/unicodeconv/unicodeconv.c file of the libotfcc.a static link library in otfcc version 0.10.3-alpha. An attacker could exploit this vulnerability to cause a denial of...

Google Android out-of-bounds write vulnerability (CNVD-2019-01560)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An out-of-bounds write vulnerability exists in the CAacDecoderInit of the aacdecoder.cpp file in Android version 9, which stems from the program's lack of boundary detection. A...

Logic Flaw Vulnerability in Maipu MPSec VPN Series Security Gateway

Mapletree Technology Co., Ltd. is a mainstream network and industry application solution provider in China. A logic flaw vulnerability exists in the Maipu MPSec VPN series security gateway. An attacker can exploit this vulnerability to achieve arbitrary administrator login...