FiberHome HG6245D devices authorization issue vulnerability

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. An authorization issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to access a telnet server...

Information Disclosure Vulnerability in MAS Mobile Proxy Server of China Mobile Communications Co.

MAS Mobile Proxy Server is an access tool to assist the original business systems of enterprises to realize wireless applications. An information leakage vulnerability exists in the MAS mobile proxy server of China Mobile Communications Corporation, which can be exploited by attackers to obtain...

Unauthorized Access Vulnerability in Streaming Media Management Server of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a provider of security products and industry solutions. There is an unauthorized access vulnerability in the streaming media management server of Hangzhou Hikvision Systems Technology Co. Ltd, which can be exploited by an attacker to obtain the...

Unauthorized Access Vulnerability in Seetong app of SkyVision Electronic Technology Co.

Seetong app is a video surveillance software. An unauthorized access vulnerability exists in Seetong app of SkyVision Electronic Technology Co. which can be exploited by attackers to obtain sensitive information...

IBM Security Verify Information Queue Information Disclosure Vulnerability (CNVD-2021-11360)

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. An information disclosure vulnerability exists in IBM Security Verify Information Queue. An attacker could exploit thi...

Unauthorized Access Vulnerability in ASRock DAYS Disaster Recovery Software (CNVD-2021-17379)

ASRock DAYS disaster recovery software belongs to DAYS series of optional products, which integrates disaster recovery, fault tolerance, backup and query functions, and provides one-stack infrastructure, the same disaster recovery management, elasticity, multi-layer data protection, smooth...

IBM Security Verify Information Queue User Credentials Sent in Plaintext Vulnerability

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. IBM Security Verify Information Queue suffers from a user credentials plaintext delivery vulnerability. An attacker...

IBM Spectrum Protect Plus Denial of Service Vulnerability (CNVD-2021-12645)

IBM Spectrum Protect Plus is a data protection and availability solution for virtualized environments that can be deployed in minutes and protect your environment in less than an hour. A denial of service vulnerability exists in IBM Spectrum Protect Plus 10.1.0 - 10.1.7. A remote user can exploit...

UFIDA Software Corporation UFIDA U8 Remote Existence Command Execution Vulnerability

UFIDA is an integrated, converged and ecological enterprise cloud service provider. A command execution vulnerability exists in UFIDA U8 Remote of UFIDA Software Corporation, which can be exploited by attackers to gain control of a server...

Denial of Service Vulnerability in Sensient Technologies Switch GW-9000-7548G

First established in 2013, Shenzhen Beijing Sense & Wink Technology Co. A denial of service vulnerability exists in GW-9000-7548G, which can be exploited by attackers to cause the device to crash...

Arbitrary File Read Vulnerability in RSR Router of Riptide Networks Co.

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. An arbitrary file read vulnerability exists in the RSR router of Ruijie Networks Corporation, which can be exploited by an attacker...

HcCMS suffers from SQL injection vulnerability (CNVD-2021-17282)

HcCms is a free website building system developed in php language. Developed using the widely popular PHP MYSQL. HcCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Intel® Graphics Drivers Multi-Generation Processor Denial of Service Vulnerability (CNVD-2021-10788)

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Intel® Graphics Drivers Multi-Generation Processor Denial of Service vulnerability can be exploited by attackers to cause a denial of service...

Multiple Intel® Server Elevation of Privilege Vulnerabilities

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Multiple Intel® Server elevation of privilege vulnerability can be exploited by an attacker to escalate privileges via local access...

Findsploit

It is an offensive tool for searching and exploiting. The primary CVE ID is not explicitly mentioned in the provided context. The tool, Findsploit, is a bash script that searches both local and online exploit databases. It includes three sub-scripts: "compilesploit" to automatically compile and r...

Adobe Magento Cross-Site Request Forgery Vulnerability

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

Zhejiang Mufeng Network Technology Co., Ltd. station building system SQL injection vulnerability

Zhejiang Mufeng Network Technology Co., Ltd. is a website construction, website production, website development, graphic design and other core enterprises. Zhejiang Mufeng Network Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers t...

NetApp Clustered Data ONTAP Information Disclosure Vulnerability (CNVD-2021-12089)

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20. An attacker can exploit this vulnerability via the AutoSupport bundle to discover node names even i...

Micro Focus Operations Bridge Reporter Remote Code Execution Vulnerability

Micro Focus Operations Bridge Reporter OBR is an IT reporting software that provides resource, event, and response time reports across server, network, and application environments. A remote code execution vulnerability exists in Micro Focus Operations Bridge Reporter version 10.40. An attacker...

Alibaba otter manager distributed database synchronization system suffers from information leakage vulnerability

Alibaba otter manager distributed database synchronization system is based on database incremental log parsing , quasi real-time synchronization to the mysql/oracle database in this server room or off-site server room , a distributed database synchronization system . Alibaba otter manager...