Google Android System Remote Code Execution Vulnerability (CNVD-2021-43417)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11. An attacker can exploit this vulnerability to...

DjVu has a denial of service vulnerability

DjVu an image compression technique that has evolved into one of the standard image document formats. A denial of service vulnerability exists in DjVu, which can be exploited by an attacker to cause a denial of service...

Arbitrary File Download Vulnerability in Dahua In-vehicle Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2021-35881)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...

Arbitrary File Download Vulnerability in Dahua In-vehicle Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2021-35888)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...

IBM QRadar SIEM Hardcoded Credentials Vulnerability (CNVD-2021-36081)

QRadar SIEM is an IBM enterprise security information and event management product that consolidates log event and network flow data from thousands of devices, endpoints and applications scattered across the network. A hard-coded credentials vulnerability exists in IBM QRadar SIEM versions 7.3 an...

Mikrotik RouterOs Memory Corruption Vulnerability (CNVD-2021-49785)

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /nova/bin/traceroute process. A remote attacker cou...

Denial of Service Vulnerability in CenturyStar Configuration Software

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Memory Corruption Vulnerability in AlarmWebEx.ocx Control of CenturyStar Configuration Software

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Command Execution Vulnerability in Youyou Firewall Gateway Management System (CNVD-2021-36254)

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

Denial of Service Vulnerability in CenturyStar Configuration Software (CNVD-2021-35747)

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Denial of Service Vulnerability in CenturyStar Configuration Software (CNVD-2021-35742)

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Intelligent Transportation Terminal Management Equipment of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a logic flaw vulnerability in the intelligent transportation terminal management equipment of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers t...

Unauthorized Access Vulnerability in SeaweedFS Filer

SeaweedFS is a scalable distributed file system. An unauthorized access vulnerability exists in SeaweedFS Filer. An attacker could exploit the vulnerability to obtain sensitive information...

Cisco Firepower Threat Defense Command Injection Vulnerability

Cisco Firepower Threat Defense FTD is unified software that provides next-generation firewall services. A command injection vulnerability exists in the CLI of Cisco Firepower Threat Defense, which can be exploited by an attacker to execute commands with root privileges on the underlying operating...

Piwigo suffers from a SQL injection vulnerability

Piwigo is a web-based photo album software from the Piwigo team. Piwigo suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Unauthorized Access Vulnerability in WF2710 of Shenzhen Leike Industrial Co.

The WF2710 is a wireless router. Ltd WF2710 has an unauthorized access vulnerability that can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Panasonic-WV-SP302 at Panasonic (China) Co.

Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. Panasonic-WV-SP302, which can be...

Denial of Service Vulnerability in Tenda AC11 (CNVD-2021-33389)

AC11 is Shenzhen Jixiang Tengda Technology Co., Ltd. launched a special for large households to create suitable for 200 megabytes and above fiber optic home use of dual-band wireless router. A denial of service vulnerability exists in the Tenda AC11, which can be exploited by an attacker to cause...

Arbitrary File Read Vulnerability in Deephaven Contact Center Agent Management System

Ltd. is a high-tech enterprise focusing on the research, development, manufacturing and sales of contact center and converged communication products with communication as the core. An arbitrary file read vulnerability exists in the Deephaven Contact Center agent management system, which can be...

Denial of Service Vulnerability in Tenda AC11 (CNVD-2021-33390)

AC11 is Shenzhen Jixiang Tengda Technology Co., Ltd. launched a special for large households to create suitable for 200 megabytes and above fiber optic home use of dual-band wireless router. A denial of service vulnerability exists in the Tenda AC11, which can be exploited by an attacker to cause...