Cisco Umbrella Injection Vulnerability (CNVD-2021-45274)

Cisco Umbrella is a cloud security platform that provides a first line of defense against Internet threats. A link injection vulnerability exists in the Scheduled Reports feature of Cisco Umbrella. The vulnerability stems from improper neutralization of user-supplied input. An attacker could...

Denial of Service Vulnerability in Multiple Huawei CloudEngine Products

Huawei CloudEngine 12800 and others are products of Huawei, China.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei Cloudengine 5800 is a 5800 series data center switch.Huawei Cloudengine 6800 is a 6800 series data center switch. Denial of service vulnerability in multiple Huaw...

Memory leak vulnerability in multiple Huawei products (CNVD-2021-25948)

Huawei IPS Module and others are products of Huawei, China.Huawei IPS Module is an Intrusion Prevention System IPS module.NGFW Module is a Next-Generation Firewall NGFW module.Secospace USG6600 is a Next-Generation Firewall product. A memory leak vulnerability exists in multiple Huawei products...

Redmine Cross-Site Scripting Vulnerability (CNVD-2021-27366)

Redmine is an open source, web-based project management and defect tracking tool. A stored cross-site scripting vulnerability exists in Redmine. An attacker can exploit this vulnerability via textile inline links to conduct cross-site scripting attacks...

Watch Out! Mission Critical SAP Applications Are Under Active Attack

Cyber attackers are actively setting their sights on unsecured SAP applications in an attempt to steal information and sabotage critical processes, according to new research. "Observed exploitation could lead in many cases to full control of the unsecured SAP application, bypassing common securit...

Weak password vulnerability in HUAWEI Secoway USG5120

Founded in 1987, Huawei is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in the HUAWEI Secoway USG5120. An attacker can exploit the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Huaxia ERP (CNVD-2021-28480)

Huaxia ERP based on SpringBoot framework and SaaS model , to provide open source ERP software for small and medium-sized enterprises , currently focusing on sales and marketing inventory + financial + production functions . Huaxia ERP has a SQL injection vulnerability, which can be exploited by...

UFIDA U8 OA Collaboration Management Software has an arbitrary file download vulnerability

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in UFIDA U8 OA Collaboration Management Software. An attacker can exploit this vulnerability to downlo...

Denial of Service Vulnerability in Adobe After Effects (CNVD-2021-28386)

Adobe After Effects is a suite of visual effects and motion graphics production software. The software is mainly used for 2D and 3D compositing, animation and visual effects production. A denial of service vulnerability exists in Adobe After Effects. An attacker could exploit this vulnerability t...

Unauthorized Access Vulnerability in Flash Flood Monitoring and Early Warning System of Chengdu Wanjiang Gangli Technology Co.

Founded in 2007, Chengdu Wanjiang Gangli Technology Co., Ltd. is positioned as a full chain service provider of water technology under the framework of artificial intelligence. An unauthorized access vulnerability exists in the flash flood monitoring and early warning system of Chengdu Wanjiang...

Devolutions Remote Desktop Manager Cross-Site Scripting Vulnerability (CNVD-2021-26214)

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in the Administration Report in Devolutions Remote Desktop Manager...

Denial of Service Vulnerability in Adobe After Effects

Adobe is an American multinational computer software company headquartered in San Jose, California. It is mainly engaged in the development of multimedia production software, but in recent years it has also begun to engage in the development of rich Internet applications, marketing applications,...

Google Chrome Out-of-Bounds Read Vulnerability (CNVD-2021-28283)

Chrome is a simple and efficiently designed web browsing tool developed by Google. An out-of-bounds read vulnerability exists in IPC in versions prior to Google Chrome 89.0.4389.114. An attacker can exploit this vulnerability to obtain sensitive information...

Accusoft ImageGear out-of-bounds write vulnerability (CNVD-2021-25373)

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the SGI format buffer size handling feature of Accusoft ImageGear 19.8. An attacker can exploit the vulnerability by supplying a specially crafted malicious fi...

Samsung Internet Access Control Error Vulnerability

Samsung Internet is a cell phone application from Samsung South Korea. It provides a browser function. An access control error vulnerability exists in Samsung Internet, which can be exploited by an attacker to bypass secret mode authentication...

Command Execution Vulnerability in Tenda Enterprise AP Management Routers (CNVD-2021-30044)

hereinafter referred to as "Tengda" was founded in 1999, is a professional supplier of network communication equipment and solutions, but also the research and development, production, supply, sales and service in one of the high-tech enterprises. A command execution vulnerability exists in TENTE...

Arbitrary File Read Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.

Ltd. is a high-tech enterprise integrating product research and development, application integration and customer service, with the main goal of providing high-quality application software system design, integration and maintenance services for users in the library industry. There is an arbitrary...

Command Execution Vulnerability in Tenda Enterprise AP Management Routers (CNVD-2021-26174)

hereinafter referred to as "Tengda" was founded in 1999, is a professional supplier of network communication equipment and solutions, but also the research and development, production, supply, sales and service in one of the high-tech enterprises. A command execution vulnerability exists in TENTE...

Command Execution Vulnerability in Tenda Enterprise AP Management Routers

hereinafter referred to as "Tengda" was founded in 1999, is a professional supplier of network communication equipment and solutions, but also the research and development, production, supply, sales and service in one of the high-tech enterprises. A command execution vulnerability exists in TENTE...

McAfee ePolicy Orchestrator Information Disclosure Vulnerability (CNVD-2021-24351)

McAfee ePolicy Orchistrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. An information disclosure vulnerability exists in McAfee ePolicy Orchestrator...