Adobe Premiere Rush Code Execution Vulnerability (CNVD-2021-101125)

Adobe Premiere Rush is a set of cross-platform video editing software from the U.S. company Audobee Adobe. A security vulnerability exists in Adobe Premiere Rush, which can be exploited by an attacker to execute arbitrary code on the system...

Bentley View Buffer Overflow Vulnerability (CNVD-2021-101861)

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a buffer error vulnerability that stems from a boundary error when processing JT files. An attacker could exploit this vulnerability to execute code in the context of the current process...

Bentley View Buffer Overflow Vulnerability (CNVD-2021-101860)

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to a buffer overflow vulnerability that stems from a boundary error when processing JT files. An attacker could exploit this vulnerability to execute code in the context of the current process...

Adobe Bridge out-of-bounds read vulnerability (CNVD-2021-99773)

Adobe Bridge is a file viewer from Adobe. 11.1.1 and earlier versions of Adobe Bridge contain an out-of-bounds read vulnerability. An attacker could exploit this vulnerability to cause a memory leak...

Google Chrome autofill security bypass vulnerability (CNVD-2021-100607)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that could be exploited by attackers to bypass security restrictions...

Librenms path traversal vulnerability

Librenms is a Librenms community of open source network monitoring system based on PHP and MySQL. The system features custom alerts, automatic discovery of network environments and automatic updates.Librenms suffers from a path traversal vulnerability that stems from Librenms 21.11.0 being affect...

Hexo cross-site scripting vulnerability

Hexo is a fast, simple and powerful blogging framework from the personal developer Tommy Chen in China. Hexo suffers from a cross-site scripting vulnerability that stems from Hexo's lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to...

Fortinet FortiClient Elevation of Privilege Vulnerability (CNVD-2021-102008)

FortiClient is a mobile endpoint security solution from Fortinet, Inc. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance.FortiClient is vulnerable to an elevation of privilege...

Google TensorFlow code issue vulnerability (CNVD-2022-09869)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow has a code issue vulnerability that can be exploited by an attacker to cause the program to crash...

Microsoft Azure Information Disclosure Vulnerability (CNVD-2021-100792)

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA. Microsoft Azure has a security vulnerability. No details of the vulnerability are currently available...

Metabase Information Disclosure Vulnerability

Metabase is an open source data analysis platform from Metabase, Inc. An information disclosure vulnerability exists in Metabase, which stems from a lack of permission validation in the product's admin-settings-maps-custom maps-add a map operation. An attacker could obtain sensitive information...

jsonpointer type obfuscation vulnerability

jsonpointer is an open source package for simple JSON addressing. jsonpointer suffers from a security vulnerability that stems from improper design or implementation during the development of code for a web-based system or product. No details of the vulnerability are currently available...

Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor (PRM) Model 3120 has an unspecified vulnerability

The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 contains a security vulnerability that could be...

Mozilla Firefox command injection vulnerability

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. A security vulnerability exists in Mozilla Firefox, which stems from a failure to display an executable warning when downloading an inetloc file that can run commands on a user's computer. No details of the...

Google Android Framework Information Disclosure Vulnerability (CNVD-2021-101440)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an information disclosure vulnerability exists in the Framework component of Google Android versions 9, 10 and 11. No detailed vulnerability details are available...

Google Android System Remote Code Execution Vulnerability (CNVD-2021-101435)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for short...

Google Android System Denial of Service Vulnerability (CNVD-2021-101429)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. a denial-of-service vulnerability exists in the System component of Google Android versions 9, 10 and 11, which could be exploited by attackers to cause a denial of service...

GitLab Information Disclosure Vulnerability (CNVD-2021-84596)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

Adobe Bridge Memory Corruption Vulnerability (CNVD-2022-67851)

Adobe Bridge is a free digital asset management application from Adobe. 11.1.1 and earlier versions of Adobe Bridge contain a memory corruption vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

Advantech WebAccess Heap Buffer Overflow Vulnerability

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A heap buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. An attacker could exploit this vulnerability to remotely execute code...

MediaWiki Cross-Site Scripting Vulnerability (CNVD-2022-05529)

MediaWiki is a free and free-to-use web-based wiki engine from the US-based MediaWiki Foundation. A cross-site scripting vulnerability exists in versions of MediaWiki prior to 1.36.2, which stems from the fact that MediaWiki messages associated with a month are not escaped until they are used on ...

Django Cross-Site Scripting Vulnerability (CNVD-2022-31939)

Django is the Django Foundation's set of open source web application framework based on the Python language. The framework includes an object-oriented mapper, view system, template system, etc. Django's Unicorn framework in version 0.35.3 and earlier has a cross-site scripting vulnerability that...

Cisco IOS and Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2021-80668)

Cisco IOS and Cisco IOS XE Software are both products of the U.S. company Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system. Cisco IOS XE Software is a single operating system for enterprise wired and wireless access, aggregatio...

Mozilla Rust Command Injection Vulnerability (CNVD-2021-78748)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a command injection vulnerability that originates from rcucell crate in Rust. For RcuCell there is an unconditional send and sync implementation, which can be exploited by an attack...

Mozilla Rust Memory Corruption Vulnerability (CNVD-2021-85282)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. playXE/cgc for Mozilla Rust suffers from a memory corruption vulnerability that can be exploited by attackers to cause data contention...

libiff buffer overflow vulnerability

libiff is a portable and extensible parser library for EA-IFF 85 implemented in ANSI C. A global buffer overflow vulnerability exists in the IFFerrorId function in error.c in libiff 20190123 and earlier versions. An attacker could exploit this vulnerability to execute code...

Apache Jena XML External Entity Injection Vulnerability

Apache Jena is the United States Apache Apache Foundation of a Java Semantic Web framework. Used to build semantic Web and linked data applications. Apache Jena in versions prior to 4.1.0 there is an XML external entity injection vulnerability , the vulnerability stems from the network system or...

APACHE SHIRO authentication bypass vulnerability

Apache Shiro is a powerful and easy-to-use Java security framework with features including authentication, authorization, encryption and session management.APACHE SHIRO authentication bypass vulnerability can be exploited by attackers to construct specific HTTP requests to bypass authentication a...

Libsixel has unspecified vulnerabilities

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel has an unspecified vulnerability that could be exploited by an attacker to cause a denial of service DOS via a specially crafted PNG file...

Solarwinds Orion Platform Cross-Site Scripting Vulnerability (CNVD-2021-101211)

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, and supports custom web interfaces, multiple user opinions, and map-based browsing of the entire network, etc....

Six Apart Movable Type Cross-Site Scripting Vulnerability (CNVD-2022-22647)

Six Apart Movable Type MT is a blogging system from Six Apart, a US-based company. A cross-site scripting vulnerability exists in Six Apart Movable Type, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited to inject arbitrary script or HT...

F5 BIG-IP Advanced WAF and ASM are unspecified vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A security vulnerability exists in F5 BIG-IP Advanced WAF and ASM due to a JSON content profile referenced in an AWAF/ASM...

Google TensorFlow integer overflow vulnerability (CNVD-2021-64075)

Google TensorFlow is an end-to-end open source machine learning platform. An integer overflow vulnerability exists in the implementation of tf.rawops.QuantizeAndDequantizeV4Grad in versions prior to Google TensorFlow 2.6.0. The vulnerability stems from converting a signed integer value to an...

Shopware has an unspecified vulnerability

Shopware is an open source e-commerce software.The import/export functionality in versions of Shopware prior to 6.4.3.1 is vulnerable to insecure direct object referencing of log files. No detailed vulnerability details are currently available...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64537)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which could be exploited to cause undefined behavior by binding a reference to a null pointer in "tf.rawops. lead to undefined behavior...

Microsoft Windows Print Spooler Remote Code Execution Vulnerability (CNVD-2022-10025)

Microsoft Windows Print Spooler is a print backend processor component of Microsoft Corporation USA.A remote code execution vulnerability exists in Microsoft Windows Print Spooler, which can be exploited by attackers to run malicious code on the system...

NETGEAR R6400 Stack Buffer Overflow Vulnerability (CNVD-2022-06699)

NETGEAR R6400 is an AC1750 dual-band WiFi router.A stack buffer overflow vulnerability exists in versions prior to NETGEAR R6400 1.0.1.52. No details of the vulnerability are currently available...

WordPress Workreap theme Access Control Error Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An access control error vulnerability exists in WordPress Workreap theme versions prior to 2.2.2, which stems...

Exiv2 Assertion Failure Vulnerability

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. exiv2 0.27.4 and earlier versions are vulnerable to an assertion failure. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...

Nexus Control Panel Code Issue Vulnerability

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare. A code download without integrity check vulnerability exists in Nexus Control Panel versions prior to 7.2.5.7. The vulnerability stems from no file validation during the upload of an update. No details of the...

MikroTik RouterOS Assertion Failure Vulnerability

MikroTik RouterOS is a Linux-based router operating system developed by MikroTik Latvia.An assertion failure vulnerability exists in MikroTik RouterOS, which stems from an authentication error in the product's /ram/pckg/security/nova/bin/ipsec process. An attacker could exploit this vulnerability...

Foxit PDF Reader Post-release Reuse Vulnerability (CNVD-2021-64091)

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

Oracle Business Intelligence Enterprise Edition has an unspecified vulnerability (CNVD-2021-54690)

Oracle Business Intelligence Enterprise Edition OBIEE, a business intelligence BI tool from Oracle, is vulnerable in Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0. Analytics Web General component in Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 is...

Apache CXF Resource Management Error Vulnerability (CNVD-2021-70100)

Apache CXF is the United States Apache Apache Foundation's an open source Web services framework. The framework supports multiple Web service standards, multiple front-end programming APIs, etc. Apache CXF has a resource management error vulnerability that can be exploited by an attacker to submi...

Google TensorFlow suffers from an unspecified vulnerability (CNVD-2021-46659)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in TensorFlow 2.4.2,2.3.3,2.2.3,2.1.4, which stems from the fact that tf.rawops.SparseCountSparseOutput causes a segmentation error to be thrown from the standard...

Unauthorized Access Vulnerability in HP LaserJet MFP M426fdw Printer

Hewlett-Packard HP is one of the information technology IT companies, founded in 1939 1. Headquartered in Palo Alto, California, USA. Hewlett-Packard has three business groups: Information Products Group, Printing and Imaging Systems Group and Enterprise Computer Professional Services Group. An...

Huawei eCNS280_TD and ESE620X vESS out-of-bounds read vulnerability

Huawei eCNS280TD is a core network device for Huawei's wireless broadband trunking system. Huawei ESE620X vESS is a virtual enterprise service controller from Huawei, China. Huawei eCNS280TD and ESE620X vESS are vulnerable to an out-of-bounds read vulnerability. An attacker can exploit this...

Google TensorFlow LoadAndRemapMatrix Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in the implementation of tf.rawops.LoadAndRemapMatrix in Google TensorFlow. An attacker can exploit this vulnerability to cause a CHECK-failure denial of service...

Google TensorFlow divide-by-zero error vulnerability (CNVD-2021-36347)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in DepthwiseConv in Google TensorFlow. No details of the vulnerability are provided at this time...

SAP Business One Code Injection Vulnerability (CNVD-2022-58479)

SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One Hana Chef Cookbook contains a code injection vulnerability that could be exploited to inject code that can be executed by the application...