QNAP NAS Access Control Error Vulnerability

Qnap Systems QNAP Systems Helpdesk is a helpdesk application from China Wizlink Qnap Systems. An access control error vulnerability exists in QNAP NAS, which can be exploited by remote attackers to compromise the security of the software...

ThroughTek P2P SDK Information Disclosure Vulnerability

ThroughTek P2P SDK is a software application from Throughtek for video surveillance products and large "audio/video" file transfers. An information disclosure vulnerability exists in the ThroughTek P2P SDK. The vulnerability can be exploited by an attacker to access sensitive information...

SAP NetWeaver AS for ABAP Cross-Site Scripting Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver AS for ABAP, which can be exploited by an attacker ...

SAP Manufacturing Execution Cross-Site Scripting Vulnerability (CNVD-2021-42410)

SAP Manufacturing Execution is an integrated Manufacturing Execution System MES solution for discrete manufacturing processes from SAP. Enables MES functionality to be customized specifically for the management and control of production environments. A cross-site scripting vulnerability exists in...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2021-42422)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. SAP 3D Visual Enterprise Viewer 9 suffers from an input validation error vulnerability that can be exploited by an attacker to cause the application to crash with the help of a specially crafted FLI file...

SAP NetWeaver AS JAVA Information Disclosure Vulnerability (CNVD-2021-42411)

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver AS JAVA, which can be exploited by an attacker t...

Adobe Animate Out-of-Bounds Read Vulnerability (CNVD-2021-49190)

Adobe Animate is a multimedia authoring and computer animation program. An out-of-bounds read vulnerability exists in Adobe Animate 21.0.6 and earlier versions. An attacker can exploit the vulnerability to read arbitrary file systems...

Command Execution Vulnerability in 230CMS

230CMS is a content management system. 230CMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Esri Arcgis Server SQL Injection Vulnerability

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A SQL injection vulnerability exists in ArcGIS Server version 10.8.1 and earlier versions, which can be exploited by attackers to obtain...

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2021-41063)

Adobe After Effects referred to as "AE" is a graphic video processing software from Adobe, suitable for organizations engaged in design and video stunts, including television stations, animation production companies, individual post-production studios and multimedia studios. An out-of-bounds read...

Google Android hid-input.c elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android hid input.c suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to escalate privileges...

SQL Injection Vulnerability in Xinhua SecPath U200-M

H3C SecPath U200-M is a new-generation UTM United Threat Management device designed by H3C for small and medium-sized enterprises/branch offices. The H3C SecPath U200-M suffers from an SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Google Android MemoryFileSystem.cpp Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in Google Android MemoryFileSystem.cpp. An attacker can exploit this vulnerability to escalate privileges...

Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Metasys Servers, Engines, and Tools Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated...

Command Execution Vulnerability in Amami Hotel's Broadband Operations System

Ammed Century Beijing Technology Co., Ltd opened is a company whose business scope includes technology promotion services; software development; computer system services; sales of electronic products and so on. A command execution vulnerability exists in the broadband operation system of Amata...

Denial of Service Vulnerability in CJ2M-CPU33 CPU (CNVD-2021-42376)

OMRON Automation China Co., Ltd. is a multinational company leading the industrial automation products and application of advanced technology, with R & D, production, technical service and logistics bases, etc. in China. A denial of service vulnerability exists in the CJ2M-CPU33 CPU, which can be...

Unspecified vulnerability in Backstage (CNVD-2021-44721)

Backstage is an open platform for building developer portals, and techdocs common contains the common features of Backstage's techdocs. An unspecified vulnerability exists in Backstage. An attacker can exploit the vulnerability to access sensitive data...

OpenText Brava! Desktop out-of-bounds write vulnerability (CNVD-2021-42325)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds write vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...

OpenText Brava! Desktop out-of-bounds read vulnerability (CNVD-2021-42339)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds read vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...

Command Execution Vulnerability in Tianqing Hanma USG Firewall

Tianqing Hanma USG Firewall is a new firewall series product launched by Qixing. There is a command execution vulnerability in Tianqing Hanma USG Firewall, which can be exploited by attackers to obtain server control privileges...