IBM Cognos Analytics XML External Entity Injection Vulnerability (CNVD-2021-38673)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. IBM Cognos Analytics suffers fr...

SQL Injection Vulnerability in Jianwen Project Management Software (PM8 Plus Edition) (CNVD-2021-42809)

Jianwen project management software is a core information platform that covers the whole project life cycle, the whole project management function, and the whole project stakeholders. Based on the core information platform, it establishes a unified information exchange platform between the...

Unauthorized Access Vulnerability in NBG2105 at Zhongqin Communication Equipment Trading (Shanghai) Co.

NBG2105 is a router from Zongqin Communication Equipment Trading Shanghai Co. Ltd. The NBG2105 suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Trend Micro Home Network Security elevation of privilege vulnerability (CNVD-2021-39159)

Trend Micro Home Network Security is a network appliance from Trend Micro, Inc. It is used to scan all incoming and outgoing traffic to and from the home network to prevent intrusions, block hacking and cyber threats, and protect privacy. An elevation of privilege vulnerability exists in the...

TamronOS IPTV System Exploits Arbitrary File Download Vulnerability

TamronOS IPTV system is a set of Linux kernel-based development of broadband operators, hotels, schools, live on-demand all-in-one solution. TamronOS IPTV system suffers from an arbitrary file download vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Unauthorized Access Vulnerability in Lexmark T640

Lexmark T640 is a printer product. An unauthorized vulnerability exists in Lexmark T640. An attacker can exploit the vulnerability to obtain sensitive information...

Denial of Service Vulnerability in Unisys Desktop Operating System Professional Edition

Unisys Desktop Operating System is a computer operating system developed on Linux. A denial of service vulnerability exists in Unisys Desktop Operating System Professional Edition. An attacker could exploit this vulnerability to cause the program to crash...

Cesanta MJS Stack Overflow Vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsevalue in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

SQL Injection Vulnerability in RG-EG Easy Gateway Management System (RG-EG)

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A SQL injection vulnerability exists in the RG-EG Easy Gateway management system, which can be exploited by attackers to obtain...

Information Leakage Vulnerability in the Control System of Beijing Zhongke NetWizard Next-Generation Firewall System

Ltd. is a high-tech enterprise specializing in the research, development and sales of network information security products, providing network information security overall solutions and security services. An information leakage vulnerability exists in the control system of Beijing ZKNW Next...

Razer Phone2 has an information disclosure vulnerability

The Razer Phone2 is a smartphone in the Razer branded lineup from Thunderbird. Razer Phone2 suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Blue Ocean Premier billing management system has information leakage vulnerability

Chengdu Starry Blue Ocean Network Technology Co., Ltd. is a professional manufacturer and supplier of routers, cell access gateways, authentication billing servers. An information leakage vulnerability exists in the Blue Ocean Premier Billing Management System. An attacker can exploit this...

IBM Cloud Pak for Data Information Disclosure Vulnerability

IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. The product supports deploying, managing and moving application environments across hybrid clouds. An information disclosure vulnerability exists in IBM Cloud Pak for Data versi...

ASUS RT-N56U has a weak password vulnerability

The ASUS RT-N56U is a router device. The ASUS RT-N56U suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Beijing Original Pioneer Network Science and Technology Development Co.

Beijing Original Pioneer Network Technology Development Co., Ltd. is a website network technology service provider. There is a logic flaw vulnerability in the background management system of Beijing Original Pioneer Network Technology Development Co. Ltd. that can be exploited by attackers to add...

Dell EMC XtremIO Cross-Site Request Forgery Vulnerability

DELL Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell DELL in the United States. A cross-site request forgery vulnerability exists in Dell EMC XtremIO versions 6.3.3 through 6.3.8, which can be exploited by an unprivileged attacker who may be ab...

IBM Security Guardium Hardcoded Credentials Vulnerability (CNVD-2021-37144)

IBM Security Guardium is a comprehensive data protection solution that offers a full range of data security features from compliance support to dynamic data shielding. A hard-coded credentials vulnerability exists in IBM Security Guardium version 11.2. An attacker could exploit the vulnerability ...

Directory Traversal Vulnerability in Internet Systems Consortium isc

The Internet Systems Consortium is the custodian and distributor of commercial-quality open source software for the Internet community. A directory traversal vulnerability exists in Internet Systems Consortium isc, which could be exploited by an attacker to obtain sensitive information...

SQL Injection Vulnerability in Ruoyi Management System (CNVD-2021-39812)

Ruoyi management system is based on SpringBoot2.0 rights management system . A SQL injection vulnerability exists in Ruoyi Management System, which can be exploited by an attacker to obtain sensitive information from the database...

Information Leakage Vulnerability in Riptide Networks' MCP Marketing Cloud Platform

Ruijie Networks is a CT infrastructure and industry solutions provider, with the main business of research, development, design and sales of network equipment, network security products and cloud desktop solutions. An information leakage vulnerability exists in Ruijie Network's MCP marketing clou...