Google Android Security Bypass Vulnerability (CNVD-2022-89769)

Google Android is a Linux-based open source operating system from Google. A security bypass vulnerability exists in Google Android. An attacker can exploit this vulnerability to bypass security restrictions and gain out-of-bounds access...

Tenda AX180 Stack Overflow Vulnerability (CNVD-2022-78480)

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China.Tenda AX1803 is vulnerable to a stack overflow vulnerability, which is caused by improper boundary checking of the fromSysTime function. An attacker could exploit this vulnerability to overflow the buffer and execute arbitrary code...

Apple OS Out-of-Bounds Write Vulnerability

iOS is a mobile operating system developed by Apple Inc. iPadOS full name: iPad Operating System is a family of mobile operating systems developed by Apple Inc. based on iOS. mac OS is a set of operating systems developed by Apple to run on the Macintosh series of computers. Apple iOS, iPadOS, an...

Google Android elevation of privilege vulnerability (CNVD-2022-65640)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from incorrect programmatic calls to high-level native procedures. An attacker can exploit this vulnerability to gain elevated...

Google Android Denial of Service Vulnerability (CNVD-2022-65635)

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which can be exploited by an attacker to cause a denial of service due to failure to properly handle incoming error messages...

Jenkins Deployment Dashboard信息泄露漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. an information disclosure vulnerability...

Apache Superset Access Control Error Vulnerability

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from an Access Control Error vulnerability that stems from improper access restrictions. A remote attacker could exploit the vulnerability to bypass implemented security...

Advantech iView SQL Injection Vulnerability (CNVD-2023-16473)

Advantech Iview, a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China, is vulnerable to a SQL injection vulnerability in Advantech iView, which stems from a special element used in SQL commands that is not neutralized. An unauthorized attacker...

74cmsSE SQL Injection Vulnerability (CNVD-2022-61443)

74cmsSE is a free open source professional recruitment system based on PHP MYSQL. 74cmsSE suffers from a SQL injection vulnerability, which originates from a keyword parameter in /home /jobfairol/resumelist that lacks validation for external input SQL statements. An attacker could use this...

Google Android Encryption Problem Vulnerability (CNVD-2022-53376)

Google Android is a Linux-based open-source operating system from the U.S. company Google Android has an encryption vulnerability that can be exploited by attackers to cause local information leakage without additional execution privileges...

YouDianCMS SQL Injection Vulnerability (CNVD-2022-59019)

YouDianCMS is a website CMS. A SQL injection vulnerability exists in YouDianCMS v9.5.0, which originates from the lack of validation of the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php against external SQL input. This vulnerability can be exploited to execute illegal SQL commands ...

WordPress WP Simple Adsense Insertion plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP Simple Adsense Insertion plugin prior to version 2.1 is vulnerable to cross-site request...

School Dormitory Management System Cross-Site Scripting Vulnerability

School Dormitory Management System is a school dormitory management system. v1.0 of School Dormitory Management System has a cross-site scripting vulnerability that originates from admin/inc/navigation.php:125 page that lacks a filter for user The vulnerability is caused by a lack of checksum...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2022-64231)

Aruba ClearPass Policy Manager is an application of the U.S. company Aruba to provide wireless network security access management system Aruba ClearPass Policy Manager has a command injection vulnerability, the vulnerability stems from the user input structure to execute the command process, the...

WordPress WPQAs plugin authorization issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. WordPress WPQAs plugin versions prior to 5.2 are vulnerable to an authorization issue that stems...

WordPress Ubigeo de Peru plugin SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. A SQL injection vulnerability exists in versions of the WordPress Ubigeo de Peru plugin prior to...

Cisco Small Business RV Series Routers Command Injection Vulnerability (CNVD-2022-89251)

Cisco Small Business RV Series Routers is an RV series router from Cisco, U.S. A command injection vulnerability exists in Cisco Small Business RV Series Routers, which can be exploited by attackers to inject and execute arbitrary commands on the underlying operating system of the affected device...

Nextcloud Android app access control error vulnerability

Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. nextcloud Android app versions prior to 3.19.1 contain an access control error vulnerability that stems from improper access control, which is exploited by An authenticated attacke...

WordPress MapPress Maps plugin authorization problem vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress MapPress Maps plugin has an authorization problem vulnerability that stems from a lack of authentication measures or...

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57803)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and previous versions, which can be exploited by remote attackers to execute HTML or JavaScript code with the help...

Google Android Buffer Overflow Vulnerability (CNVD-2022-47674)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a buffer overflow vulnerability, which can be exploited by attackers to cause local privilege escalation...

Google Android Buffer Overflow Vulnerability (CNVD-2022-47675)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a buffer overflow vulnerability, which can be exploited by attackers to cause local privilege escalation...

Jenkins Parameterized Trigger Plugin Information Disclosure Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. These values are stored and can be viewed by an attacker with access to the...

Nextcloud Talk Input Validation Error Vulnerability

Nextcloud Talk, a self-hosted local audio/video and chat communication service from Nextcloud Germany, is vulnerable to a user redirection vulnerability in versions prior to 12.1.2. The vulnerability stems from the system's failure to reasonably handle target jumps, which could be exploited to...

TOTOLink A810R Command Injection Vulnerability

TOTOLink A810R is a wireless dual-band router from TotoLink, China.TOTOLink A810R V4.1.2cu.5182B20201026 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-47680)

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a lack of privilege checks and could result in CPU behavior that could be considered faulty and could be exploited by attackers to...

libsolv Heap Overflow Vulnerability (CNVD-2022-15950)

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

TP-Link AC1750 Input Validation Error Vulnerability

The Tp-link AC1750 is a wireless router from China P&L Tp-link. The TP-Link AC1750 suffers from an input validation error vulnerability that stems from a specific flaw in the NetUSB.ko module. The issue is caused due to a lack of proper validation of user-supplied data, which could result in an...

Google Tensorflow code issue vulnerability (CNVD-2022-09892)

Google TensorFlow is an end-to-end open-source platform for machine learning from Google, a U.S. company. Google TensorFlow is vulnerable to a code issue that could be exploited by an attacker to cause a crash...

Mike Perham Sidekiq has an unspecified vulnerability

Mike Perham sidekiq is an application open sourced by Mike Perham. Using threads to process many jobs simultaneously in the same process, a security vulnerability exists in Mike Perham Sidekiq, which stems from the api.rb of Sidekiq before 6.4.0, where there is no limit on the number of days to...

Trend Micro Deep Security Code Injection Vulnerability

Trend Micro Deep Security is a suite of intelligent data protection solutions from Trend Micro. A code injection vulnerability exists in the Trend Micro Deep Security Agent that stems from an input validation error when handling directory traversal sequences. An attacker could use this...

Google Android Information Disclosure Vulnerability (CNVD-2022-05479)

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a configuration error in the network system or product during operation. An attacker could use the vulnerability to obtain sensiti...

Mozilla Rust actix-web crate memory corruption vulnerability

Rust actix-web crate is a Rust web framework. mozilla Rust actix-web crate memory corruption vulnerability can be exploited by attackers to cause memory corruption...

Blackmagic Design DaVinci Resolve Buffer Overflow Vulnerability

Blackmagic Design DaVinci Resolve is an all-in-one software tool for editing, color correction, visual effects, motion graphics and audio post-production.Blackmagic Design DaVinci Resolve 17.3.1.0005 is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute...

Microsoft Defender for IoT Remote Code Execution Vulnerability (CNVD-2022-04003)

Microsoft Defender for IoT is an asset discovery, vulnerability management, and threat monitoring solution for IoT/OT environments.Microsoft Defender for IoT suffers from a remote code execution vulnerability. An attacker could exploit this vulnerability to execute code on the target host...

BaserCMS path traversal vulnerability

baserCMS is an enterprise content management system CMS from the baserCMS Basercms team. baserCMS is vulnerable to a path traversal vulnerability that allows an attacker with upload privileges to upload a crafted zip file capable of path traversal on the host operating system...

Open Design Alliance Drawings SDK Out-of-Bounds Writing Vulnerability (CNVD-2022-01428)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides easy, object-oriented API access to data in .dwg and .dgn, C API, file repair support, support for . code execution...

Google TensorFlow Resource Management Error Vulnerability (CNVD-2021-92552)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A resource management error vulnerability exists in Google TensorFlow due to a memory leak and post-release usage issue in the asynchronous implementation of CollectiveReduceV2. This occurs due to...

Google Chrome New Tabs Data Validation Insufficient Vulnerability

Chrome is a simple and efficient web browsing tool developed by Google. versions prior to Google Chrome 95.0.4638.69 are vulnerable to insufficient data validation in new tabs. A remote attacker could inject arbitrary script or HTML into a new browser tab via a crafted HTML page...

OnionShare has an unspecified vulnerability

OnionShare is an open source tool used to securely and anonymously share files, host websites, and chat with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare has a security vulnerability that could ...

TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17973)

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Typo3 association in Switzerland.TYPO3 has a cross-site scripting vulnerability that stems from failure to properly parse, clean and encode malicious rich text content, and no detailed vulnerability details...

Mozilla Rust Denial of Service Vulnerability (CNVD-2021-61403)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A denial-of-service vulnerability exists in the appendix box of Mozilla Rust versions prior to November 15, 2020, which can be exploited by an attacker to cause data contention by sending a specially crafted...

TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17987)

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Typo3 association in Switzerland.TYPO3 suffers from a cross-site scripting vulnerability that stems from the fact that when the settings of the back-end layout are not properly coded, the corresponding grid...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2021-54704)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to resource management errors, which can be exploited by remote attackers to execute denial-of-service DoS attacks...

Envoy path traversal vulnerability

Envoy is an open source distributed proxy server. Envoy is vulnerable to a path traversal vulnerability that could be exploited by an attacker to bypass the program's authorization services...

Google TensorFlow heap out-of-bounds write vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A heap out-of-bounds write vulnerability exists in ArgMin/ArgMax in Google TensorFlow. No detailed vulnerability details are provided at this time...

Atlassian Jira Server and Data Center has an unspecified vulnerability (CNVD-2021-55941)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia, Atlassian JIRA Server is a server version of the defect tracking management system. Atlassian JIRA Data Center is the data center version of Atlassian JIRA. Atlassian Jira Server and Data Center have a...

Symantec Endpoint Protection Manager Information Disclosure Vulnerability (CNVD-2020-09964)

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. Symantec Endpoint Protection Manager suffers from an information disclosure vulnerabilit...

Rittal Chiller SK 3232-Series Improper Access Control Vulnerability

The Rittal Chiller SK 3232-Series is a liquid cooling device from Rittal, Germany. An improper access control vulnerability in the web interface in the Rittal Chiller SK 3232-Series, which arises from an authentication mechanism that is not sufficiently protected to prevent unauthorized...

WordPress BearDev JoomSport Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.BearDev JoomSport plugin is a plugin used in it to build sports sites. A SQL injection vulnerability exists in the WordPress...