Google TensorFlow Dezero Error Vulnerability (CNVD-2021-64067)

Google TensorFlow is an end-to-end open source machine learning platform. tf.rawops.ResourceScatterDiv implementation in versions prior to Google TensorFlow 2.6.0 is vulnerable to a dezero error. No detailed vulnerability details are available at this time...

Libelfin Denial of Service Vulnerability (CNVD-2021-66402)

Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. a denial of service vulnerability exists in the dwarf::cursor::skipform function of Libelfin 0.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted ELF file causing a...

NETGEAR R6400 Stack Buffer Overflow Vulnerability (CNVD-2022-06699)

NETGEAR R6400 is an AC1750 dual-band WiFi router.A stack buffer overflow vulnerability exists in versions prior to NETGEAR R6400 1.0.1.52. No details of the vulnerability are currently available...

Adobe Connect Reflective Cross-Site Scripting Vulnerability

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.2.2 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

WordPress Handsome Testimonials&Reviews plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Handsome Testimonials&Reviews plugin is an application plugin for WordPress. Versions of the WordPress Handsome...

HCC Embedded InterNiche Technologies NicheStack Input Validation Error Vulnerability

InterNiche Technologies NicheStack is a small footprint, RFC-compliant embedded stack that is portable to commercial or proprietary non-MMU operating systems. InterNiche Technologies NicheStack suffers from an input validation error vulnerability that stems from a boundary condition in the ICMP...

Foxit PDF Reader Annotation Remote Code Execution Vulnerability (CNVD-2021-59173)

Foxit PDF Reader is a PDF reader from Foxit China.A security vulnerability exists in Foxit PDF Reader Annotation, which can be exploited by attackers to execute code in the context of the current process...

Neo4j has unspecified vulnerabilities

Neo4j is a Java-based and fully ACID-compatible graph database from Neo4j, which supports data migration, add-ons, etc. A security vulnerability exists in Neo4j Graph Database versions 4.2 and 4.3, which stems from a failure to reset the security environment during certain transaction operations ...

Adobe Illustrator 2021 post-release reuse vulnerability (CNVD-2021-74115)

Adobe Illustrator 2021 is a vector drawing software. A security vulnerability exists in Adobe Illustrator 2021 25.2.3 and earlier versions when handling specially crafted files. An attacker can exploit the vulnerability to read arbitrary file systems...

Atlassian JIRA Server Cross-Site Scripting Vulnerability (CNVD-2021-55939)

Atlassian JIRA Server is the server version of a defect tracking management system from Atlassian Australia. The system is mainly used for tracking and managing various types of issues and defects in work. A cross-site scripting vulnerability exists in Atlassian Jira Server, which can be exploite...

Oracle VM VirtualBox Unauthorized Access Vulnerability (CNVD-2021-54712)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.24. An attacker could use this vulnerability to gain unauthorized read access to a portion of the product-accessibl...

Siemens Jt2go and Siemens Teamcenter Visualization Out-of-Bounds Writing Vulnerability

Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens AG, Germany. Siemens Jt2go is a JT file viewer. An out-of-bounds write vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The vulnerability stems from a...

Apache CXF Resource Management Error Vulnerability (CNVD-2021-70100)

Apache CXF is the United States Apache Apache Foundation's an open source Web services framework. The framework supports multiple Web service standards, multiple front-end programming APIs, etc. Apache CXF has a resource management error vulnerability that can be exploited by an attacker to submi...

NETGEAR WAC104 Authentication Bypass Vulnerability

NETGEAR WAC104 is a wireless access point AP from Netgear, Inc. The NETGEAR WAC104 authentication bypass vulnerability can be exploited by an unauthenticated attacker to bypass the AP by placing...

Http4s path traversal vulnerability (CNVD-2021-44963)

Http4s is an open source for Scala streaming HTTP server . Http4s has a path traversal vulnerability that can be exploited by an attacker to obtain sensitive information...

Google TensorFlow heap out-of-bounds read vulnerability (CNVD-2021-37642)

Google TensorFlow is an end-to-end open source machine learning platform. A heap out-of-bounds read vulnerability exists in the implementation of tf.rawops.MaxPoolGradWithArgmax in Google TensorFlow. An attacker can exploit the vulnerability by passing constructed inputs to the "tf.raw\u...

Google TensorFlow divide-by-zero error vulnerability (CNVD-2021-36347)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in DepthwiseConv in Google TensorFlow. No details of the vulnerability are provided at this time...

EC-CUBE cross-site scripting vulnerability (CNVD-2021-34683)

Ec-cube is an open source e-commerce system of the Japanese company Ec-cube . A cross-site scripting vulnerability exists in EC-CUBE versions 4.0.0 through 4.0.5. The vulnerability stems from a program that allows remote attackers to inject specially crafted script into specific input fields of E...

Foxit Reader Code Execution Vulnerability (CNVD-2021-36654)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

Valve Steam Buffer Overflow Vulnerability

Valve Steam is a suite of game distribution management platforms from Valve Corporation in the United States. The platform provides digital rights management, multiplayer, streaming, and social networking services. A buffer overflow vulnerability exists in Valve Steam version 2021-04-10 and earli...

Rust buffer overflow vulnerability (CNVD-2021-29835)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in reorder crate for Rust 2021-02-24 and earlier, which stems from the fact that swapindex may return uninitialized values if the len returned by the iterator is too large...

Unspecified Vulnerability in Ocean Data Systems Dream Report 5 R20-2 (CNVD-2021-28325)

Ocean Data Systems Dream Report 5 R20-2 is an application from the French company Ocean Data Systems. A real-time reporting and charting solution. Dream Report 5 R20-2 has a security vulnerability that allows an attacker to replace the Syncfusion Dashboard Service service binary to escalate...

ASUS GPUTweak II Buffer Overflow Vulnerability (CNVD-2021-28253)

ASUS GPUTweak II is a driver from ASUS China. It is used to drive more FPS. A buffer overflow vulnerability exists in ASUS GPUTweak II versions prior to 2.3.0.3, which allows a low-privileged user to obtain NT AUTHORITYSYSTEM privileges via DeviceIoControl. No details of the vulnerability are...

Skyworth Digital Technology RN510 Access Control Error Vulnerability

The RN510 is a dual-band wireless AC2100 access point from Skyworth Digital Technology. An access control error vulnerability exists in /cgi-bin/testversion.asp in the Skyworth Digital Technology RN510 version V.3.1.0.4. An attacker can exploit the vulnerability to obtain the SSID password and We...

Django Directory Traversal Vulnerability (CNVD-2021-45275)

Django is an advanced Python web framework that pushes rapid development and clean, functional design. A directory traversal vulnerability exists in MultiPartParser in Django. The vulnerability can be exploited to perform directory traversal via an uploaded file with a specially crafted filename...

CloudBees Jenkins OWASP Dependency-Track Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

Zen Cart Cross-Site Scripting Vulnerability (CNVD-2021-22861)

Zen Cart is open source, free mall system for building professional online stores. A reflective cross-site scripting vulnerability exists in Zen Cart 1.5.6d. An attacker can execute malicious script via the includes/templates/templatedefault/common/tplmainpage.php or...

D-Link DIR-3060 Command Injection Vulnerability

The D-Link DIR-3060 is a router from China-based AUO D-Link. The D-Link DIR-3060 suffers from a command injection vulnerability that can be exploited by an attacker to remotely authenticate a user to inject arbitrary commands in the administrative or root environment...

F5 BIG-IP Cross-Site Scripting Vulnerability (CNVD-2021-17196)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. F5 BIG-IP suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trigger cross-site scripti...

Siemens Solid Edge Out-of-Bounds Read Vulnerability

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. An out-of-bounds read vulnerability exists in Siemens Solid Edge. The vulnerability is due to a lack of proper...

Siemens Solid Edge Out-of-Bounds Write Vulnerability (CNVD-2021-16439)

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. An out-of-bounds write vulnerability exists in Siemens Solid Edge. The vulnerability is due to a lack of proper...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2021-13208)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

Agentejo Cockpit NoSQL Injection Vulnerability (CNVD-2021-01561)

Agentejo Cockpit is a self-hosted "headless" and api-driven lightweight, open source content management system. A NoSQL injection vulnerability exists in Agentejo Cockpit versions prior to 0.11.2. The vulnerability can be exploited to conduct a NoSQL injection attack via the Controller/Auth.php...

Microsoft Windows/Windows Server Information Disclosure Vulnerability (CNVD-2021-63305)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows/Windows Serv...

Microsoft Windows/Windows Server Information Disclosure Vulnerability (CNVD-2021-63309)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. Microsoft Windows/Windows Server is vulnerable to an information disclosure vulnerability that originates...

OpenJS Electron Security Bypass Vulnerability (CNVD-2021-21922)

OpenJS Electron is the OpenJS Foundation of an open source framework for desktop GUI application development . A security vulnerability exists in the contextIsolation module in OpenJS Electron versions prior to 7.2.4, prior to 8.2.4, and prior to 9.0.0-beta21. An attacker can exploit the...

CAYIN Technology xPost SQL Injection Vulnerability

CAYIN Technology xPost is a digital signage system for conference room management from CAYIN Technology in Taiwan, China. A SQL injection vulnerability exists in CAYIN Technology xPost 2.5 and prior versions. The vulnerability stems from a database-based application that lacks validation of...

openfortivpn Certificate Validation Mishandling Vulnerability

openfortivpn is a client program for PPP Point-to-Point Protocol + SSL Transport Layer Security Protocol VPN tunneling service. A security vulnerability exists in openfortivpn version 1.11.0 using OpenSSL versions prior to 1.0.2, which stems from a failure to take into account the '' character wh...

WordPress Unauthorized Operation Vulnerability (CNVD-2020-03944)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress versions prior to 5.3.1, which stems from a lack of access contro...

Drupal Access Bypass Vulnerability (CNVD-2019-26798)

Drupal is an open source content management system developed by the Drupal community using the PHP language. A security vulnerability exists in Drupal 8.7.4. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

libpng buffer overflow vulnerability (CNVD-2019-13088)

libpng is a PNG reference library that can create, read and write PNG graphics files. A buffer overflow vulnerability exists in the 'contrib/pngminus/pnm2png.c:gettoken' function in libpng, which originates when a networked system or product performs an operation in memory without properly...

Xiph.Org libao '_tokenize_matrix' function denial of service vulnerability

Xiph.Org libao is a cross-platform audio library capable of outputting audio on a variety of different platforms. A security vulnerability exists in the 'tokenizematrix' function of the audioout.c file in Xiph.Org libao version 1.2.0. A remote attacker can exploit this vulnerability to cause a...

Microsoft Windows .NET Framework Remote Code Execution Vulnerability

NET Framework is a software framework developed by Microsoft. A remote code execution vulnerability exists when Microsoft .NET Framework does not properly validate input before loading libraries. An attacker could take control of an affected system by exploiting this vulnerability...

Ceragon FiberAir IP-10 Private Key Vulnerability

The Ceragon FiberAir IP-10 is a wireless microwave transmission device from Ceragon Israel. The Ceragon FiberAir IP-10 SSH private key disclosure vulnerability allows remote attackers to exploit the vulnerability to gain unauthorized access to the device...

Multiple Cross-Site Scripting Vulnerabilities in EMC M&R/ViPR SRM

EMC M&R Watch4Net is an IT performance management application.EMC ViPR SRM is a storage resource management application. Multiple cross-site scripting vulnerabilities exist in EMC M&R versions prior to 6.5u1 and ViPR SRM versions prior to 3.6.1, which could allow remote authenticated users to...

IBM SPSS Statistics Encryption Problem Vulnerability

IBM Spss Statistics is a software package from International Business Machines IBM, Inc. It is used for interactive or batch statistical analysis. An encryption issue vulnerability exists in IBM SPSS Statistics versions 26.0, 27.0.1, 28.0.1, and 29.0.2, which stems from the use of a weak encrypti...

Apache OFBiz code issue vulnerability (CNVD-2024-46271)

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A security vulnerability exists in Apache OFBiz that stems from the product's failure to properly validate...

Microsoft SQL Server Remote Code Execution Vulnerability (CNVD-2024-38791)

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server, which can be exploited by an attacker to execute arbitrary...

Apache DolphinScheduler Input Validation Error Vulnerability (NVD-C-2024-618180)

Apache DolphinScheduler is a distributed DAG visualization-based workflow task scheduling system from the Apache Apache Foundation in the United States. An input validation error vulnerability exists in Apache DolphinScheduler versions prior to 3.1.0 through 3.2.2, which can be exploited by an...

Mozilla Firefox for iOS Security Bypass Vulnerability (CNVD-2024-36715)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for iOS, which can be exploited by attackers to execute Javascript commands in the browser...