TOTOLINK A3000RU product.ini file hard-coded password vulnerability

The TOTOLINK A3000RU is a home wireless router. The TOTOLINK A3000RU suffers from a hard-coded password vulnerability that originates from the use of hard-coded passwords in the /webcste/cgi-bin/product.ini file. An attacker can exploit the vulnerability by using a hard-coded password to access t...

PT-2024-28430 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM versions prior to 5.9.2 Description: The issue is an authenticated SQL injection due to improper sanitization of user input. Authentication is required, but no elevated privileges are necessary. This allows attackers to inject SQL...

Autodesk AutoCAD X_T File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XT...

Google Chrome Security Bypass Vulnerability (CNVD-2024-33606)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from an improper implementation of FedCM. An attacker can exploit the vulnerability to bypass security restrictions...

Google Chrome Security Bypass Vulnerability (CNVD-2024-33604)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from an improper implementation of HTML. An attacker can exploit the vulnerability to bypass security restrictions...

UFIDA U8 Cloud suffers from SQL injection vulnerability (CNVD-2024-36940)

U8 Cloud is a digital platform for enterprises to go to the cloud, integrating transactions, services and management into a total ERP solution. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to gain access to sensitive database information...

Foxit PDF Reader Memory Misreference Vulnerability (CNVD-2024-33787)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A memory misreference vulnerability exists in Foxit PDF Reader, which can be exploited by attackers to disclose sensitive information...

The vulnerability of the Line Printer Daemon (LPD) service on Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Line Printer Daemon LPD service in Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

SAP NetWeaver Cross-Site Scripting Vulnerability (CNVD-2024-35654)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A cross-site scripting vulnerability exists in SAP NetWeaver Knowledge Management XMLEditor, which stems...

LG Simple Editor Remote Code Execution Vulnerability (CNVD-2024-33681)

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from a remote code execution vulnerability that is caused by not properly validating a user-supplied string before executing a...

Google Chrome Security Bypass Vulnerability (CNVD-2024-34505)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability, which can be exploited by an attacker to potentially exploit object damage via a crafted HTML page...

The vulnerability in the implementation of the Online Certificate Status Protocol (OCSP) on Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Online Certificate Status Protocol OCSP implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Google Android Framework elevation of privilege vulnerability (CNVD-2024-39683)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android Framework due to an error in a framework component that can be exploited by an attacker to gain elevated privileges on the system...

Microsoft SharePoint Server Information Disclosure Vulnerability (CNVD-2024-39673)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

D-Link DIR-2640 Authentication Bypass Vulnerability (CNVD-2024-33408)

The D-Link DIR-2640 is a high power Wi-Fi router from China's AUO D-Link. The D-Link DIR-2640 suffers from an authentication bypass vulnerability that can be exploited by an attacker to bypass authentication...

Google Android elevation of privilege vulnerability (CNVD-2024-39689)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that is caused by a lack of privilege checks in multiple locations. An attacker can exploit this vulnerability to escalate privileges...

Information Disclosure Vulnerability in Multiple Mozilla Products

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An information disclosure vulnerability exists in multiple Mozilla...

NETGEAR RAX30 Information Disclosure Vulnerability (CNVD-2024-33909)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from an information disclosure vulnerability that can be exploited by attackers to disclose sensitive information...

Remote Code Execution Vulnerability in D-Link DIR-2150 (CNVD-2024-33405)

The D-Link DIR-2150 is a wireless router from China-based AUO D-Link. A remote code execution vulnerability exists in the D-Link DIR-2150, which can be exploited by an attacker to execute arbitrary code...

Remote Code Execution Vulnerability in D-Link DIR-2150 (CNVD-2024-33402)

The D-Link DIR-2150 is a wireless router from China-based AUO D-Link. A remote code execution vulnerability exists in the D-Link DIR-2150, which can be exploited by an attacker to execute arbitrary code...