2436 matches found
Google Chrome QR scanner security bypass vulnerability
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 90.0.4430.72 in the "QR scanner". An attacker can exploit this vulnerability to bypass security restrictions...
Denial of Service Vulnerability in Suncom Cloud QTouch Configuration Software General Edition (CNVD-2021-30059)
QTouch configuration software is a professional cross-platform automation software launched by Wuhan SunTone Intelligent Technology Co. A denial of service vulnerability exists in the general version of SunTouch Cloud QTouch Configuration Software. An attacker can exploit this vulnerability to...
Jason Summers deark null pointer dereference vulnerability
Jason Summers deark is a Jason Summers open source application. A command line utility that can decode certain types of files. A null pointer dereference vulnerability exists in the dbufwrite function in src/deark-dbuf.c in versions of Jason Summers deark prior to 1.5.8, which can be exploited by...
MDaemon Webmail IFRAME Injection Vulnerability
MDaemon Webmail is a server-side application for providing mail services from MDaemon, Inc. in the United States. An IFRAME injection vulnerability exists in MDaemon Webmail versions prior to 20.0.4, which can be exploited by an attacker to perform any action with the privileges of the attacked...
Denial of Service Vulnerability in Lovecraft Windows Client
Aikiye is an online video website founded on April 22, 2010 by Gong Yu. A denial-of-service vulnerability exists in the AikiYi Windows client, which can be exploited by attackers to cause a denial-of-service attack...
The vulnerability of the SeaMonkey web browser software lies in the lack of protection for sensitive data, which allows attackers to gain unauthorized access to protected information.
The vulnerability of the SeaMonkey web browser lies in the lack of protection for sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-29061)
Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited by an attacker to achieve remote code execution...
Google Chrome Remote Code Execution Vulnerability (CNVD-2021-27989)
Google Chrome is a web browser from Google, an American company. Google Chrome remote code execution vulnerability can be exploited by an attacker to construct a specially crafted page, which can be accessed by a user resulting in remote code execution...
Weak Password Vulnerability in WR1045ND of P&L Technologies Ltd.
"TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in TP-LINK WR1045ND, which can be exploited by attackers to log in to the system backend and obtain sensitive information...
LibRaw suffers from a stack overflow vulnerability
LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG, and others format images, supporting various operating systems. LibRaw suffers from a stack overflow vulnerability that can be exploited to gain control of the server...
Command Execution Vulnerability in Wave ClusterEngine (CNVD-2021-30110)
Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. A command execution vulnerability exists in Wave ClusterEngine, which can be exploited by an attacker to gain server control privileges...
Patreon WordPress Cross-Site Scripting Vulnerability (CNVD-2021-28760)
Patreon is a subscription-based crowdfunding platform and Patreon WordPress is a WordPress plugin for the platform. A cross-site scripting vulnerability exists in Patreon WordPress versions prior to 1.7.2. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via the...
F5 BIG-IP Denial of Service Vulnerability (CNVD-2021-29553)
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to trigger a fatal error, thereby...
Mozilla Thunderbird Denial of Service Vulnerability (CNVD-2021-28299)
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A denial of service vulnerability exists in Mozilla Thunderbird, which can be exploited b...
TnCMS suffers from a file upload vulnerability (CNVD-2021-30353)
TnCMS is a light content management system based on ThinkPHP6+layUI based development. TnCMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of the server...
Weak password vulnerability in TP-LINK TL-WR840N (CNVD-2021-30196)
The TL-WR840N is a wireless router. A weak password vulnerability exists in the TP-LINK TL-WR840N, which can be exploited by an attacker to obtain sensitive information...
Denial of Service Vulnerability in MikroTik CHR Routers
Founded in 1995 and headquartered in Riga, Latvia, MikroTik is engaged in the development of routers and wireless ISP systems. A denial of service vulnerability exists in the MikroTik CHR router, which can be exploited by an attacker to cause the program to crash...
Remote Command Execution Vulnerability in E-Mail Email System
YZP is a professional mail system software and total solution provider. The remote command execution vulnerability in the YZP email system can be exploited by an attacker to achieve remote command execution without authorization and gain access to the target server...
Adobe After Effects has a stack overflow vulnerability
Adobe After Effects, abbreviated as "AE", is a graphic video processing software from Adobe, suitable for organizations engaged in design and video stunts, including television stations, animation production companies, individual post-production studios and multimedia studios. A stack overflow...