Google Android Denial of Service Vulnerability (CNVD-2023-18907)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-00607)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Tenda W30E Stack Overflow Vulnerability (CNVD-2023-18919)

Tenda W30E is a router from Tenda, a Chinese company. Tenda W30E is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...

GPAC memory leak vulnerability

GPAC is an open source multimedia framework. GPAC version v2.1-DEV-rev428-gcb8ae46c8-master is vulnerable to a memory leak that originates from a failure or inability to free dynamically allocated heap memory in the dimCboxread function of isometria/boxcode3gpp.c. An attacker could exploit the...

Google Chrome Security Bypass Vulnerability (CNVD-2023-08256)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome caused by insufficient policy enforcement in the file system API. An attacker could exploit this vulnerability to bypass security restrictions...

WordPress WP Admin UI Customize plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting...

Google Chrome Camera Capture Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome Camera Capture, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service...

WordPress TeraWallet plugin insecure direct object reference vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An insecure direct object...

Unspecified vulnerability in FusionDIrectory

FusionDIrectory is an application of FusionDIrectory open source. Used to ensure that the user's identity management security. A security vulnerability exists in FusionDIrectory version 1.3, which stems from a failure to properly handle sessions and can be exploited by an attacker to potentially...

ZTE ZXA10 C3XX Access Control Error Vulnerability

ZTE ZXA10 C3XX is a series of optical access aggregation equipment with EPON/GPON function from China ZTE Corporation ZTE. An access control error vulnerability exists in the ZTE ZXA10 C3XX version 2.1.0 and later, before 2.1.0xgp002.4. The vulnerability stems from improper access control setting...

Billing System Project fetchOrderData.php SQL Injection Vulnerability

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the orderId parameter in fetchOrderData.php against an externally entered SQL statement. An attacker...

WordPress Welcart eCommerce directory traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Welcart eCommerce 2.7.7 and earlier versions are vulnerable to a directory traversal vulnerability,...

Google Android Buffer Overflow Vulnerability (CNVD-2022-80692)

Google Android is a Linux-based open source operating system from Google, a U.S. company. Google Android has a security vulnerability that stems from incorrect input validation and a possible method of corrupting memory. No details of the vulnerability are currently available...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2023-28099)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from the United States Cisco Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center, which could be exploited by a remote, authenticated attacker to conduct an XSS...

Google Android Lack of Authorization Vulnerability (CNVD-2022-78153)

Google Android is a Linux-based open-source operating system from Google, a U.S. company. An attacker could exploit this vulnerability to cause a local privilege escalation without additional enforcement privileges...

Democritus Project d8s-networking code execution vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. Democritus Project d8s-networking has a security vulnerability that stems from its inclusion of a potential code execution backdoor inserted by a third party. An attacker...

Democritus Project d8s-dates code execution vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-dates, which stems from the existence of a potential code execution backdoor inserted by a third party in the...

Open5GS ngap-handler.c Denial of Service Vulnerability

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS v2.4.11 due to a memory leak in the ngap handler.c component. By using a specially crafted UE attachment, an attacker can exploit this...

Bento4 AP4_DescriptorFactory::CreateDescriptorFromStream function denial of service vulnerability

Bento4 is an open source C library for reading and writing MP4 files.Bento4 v1.6.0-639 contains a denial of service vulnerability that originates in AP4DescriptorFactory:.CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp: CreateDescriptorFromStream is not freed or fails to free...

Linux kernel resource management error vulnerability (CNVD-2022-74087)

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a memory misreference vulnerability that results from a mix-up in the program's instructions responsible for freeing memory. An attacker could exploit the vulnerability to...

Unspecified vulnerability in Linux kernel (CNVD-2022-70572)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that originates from an affected function intrcallback in file drivers/net/usb/r8152.c, which results in logging of too much...

Oracle PeopleSoft Enterprise PeopleTools Cross-Site Scripting Vulnerability

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for delivering PeopleSoft applications that are synchronized with users' needs and expectations. A cross-site scripting vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the vulnerability to...

Oracle MySQL Installer Information Disclosure Vulnerability (CNVD-2023-01497)

Oracle MySQL Server is a relational database from Oracle Corporation. An information disclosure vulnerability exists in the Installer: General component of Oracle MySQL Installer 1.6.3 and earlier versions. An attacker can exploit this vulnerability to corrupt MySQL Installer and perform...

OTFCC Heap Buffer Overflow Vulnerability (CNVD-2023-10596)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. OTFCC suffers from a heap buffer overflow vulnerability that originates from a boundary error in /release-x64/otfccdump+0x6b0478 when handling untrusted input. An attacker could exploit the...

SAP 3D Visual Enterprise Author .slddrw Buffer Overflow Vulnerability

SAP 3D Visual Enterprise Author is a desktop application for managing 2D, 3D, animation, video and audio assets from SAP. A buffer overflow vulnerability exists in SAP 3D Visual Enterprise Author version 9, which stems from a lack of proper memory management and can be exploited by an attacker to...

Microsoft Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Windows Resilient File System ReFS, which stems from an improper assignment of privileges in an application. An attacker could exploit...

Microsoft Windows Event Logging Service Denial of Service Vulnerability

A denial of service vulnerability exists in Microsoft Windows Event Logging Service, an operating system used by Microsoft for personal devices. The vulnerability stems from a failure to properly handle incoming error messages, and an attacker could exploit the vulnerability to cause a denial of...

Microsoft OLE DB Provider for SQL Server Remote Code Execution Vulnerability

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows unified access to data from a variety of sources.A remote code execution vulnerability exists in Microsoft OLE DB Provider for SQL Server, which stems from An attacker can exploit the vulnerability to cause...

WordPress Woo Billingo Plus and Integration for Billingo & Gravity Forms Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Woo Billingo Plus version 4.4.5.4 or earlier, Integration for Billingo & Gravity Forms...

Huawei HarmonyOS kernel module out-of-bounds read vulnerability

Huawei HarmonyOS is an operating system from Huawei China, Inc. providing a microkernel-based, full-scenario distributed operating system. Huawei HarmonyOS provides a microkernel-based, full-scenario distributed operating system. Huawei HarmonyOS suffers from an out-of-bounds read vulnerability,...

Rocket.Chat chat.getThreadsList Information Disclosure Vulnerability

Rocket.Chat is an open source team chat software. Chat 5.0 before the version of the information leakage vulnerability, the vulnerability stems from /api/v1/chat.getThreadsList lack of user input cleanup, an attacker can exploit the vulnerability through the Mongo DB injection will be private...

WordPress OAuth client Single Sign On Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Veritas Desktop and Laptop Option Cross-Site Scripting Vulnerability

Veritas Desktop and Laptop Option is a software from Veritas, USA that provides data backup and endpoint protection features for Windows and Mac desktops and laptops. The software supports network-less protection, instant backup, customized failover, self-service restore, and other protection...

Online Banking System SQL Injection Vulnerability (CNVD-2022-68374)

Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that stems from a SQL injection issue in the /net-banking/sendfundsaction.php location. No details of the vulnerability are available at this time...

OTFCC has an unspecified vulnerability (CNVD-2023-11787)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a segmentation violation located at its /release-x64/otfccdump 0x6badae. No detailed vulnerability details are currently available...

Google Android Information Disclosure Vulnerability (CNVD-2022-81244)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates in ContentService, which allows checking the presence of an established account on the device due to a missing license check. An attacker...

Apache OFBiz Code Injection Vulnerability (CNVD-2023-03918)

Apache OFBiz is an enterprise resource planning ERP system from the Apache Foundation. A code injection vulnerability exists in Apache OFBiz 18.12.05 and earlier versions, which stems from an error in Birt and can be exploited by attackers to remotely execute code...

Ingredients Stock Management System SQL Injection Vulnerability (CNVD-2023-11181)

Ingredients Stock Management System is an ingredient stock management system by Carlo Montero. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /categories/ An SQL injection issue exists in the id parameter of the /categories/...

Microsoft Azure Site Recovery Remote Code Execution Vulnerability (CNVD-2022-67840)

Microsoft Azure Site Recovery ASR is a DRaaS provided by Azure for cloud and hybrid cloud architectures. a remote code execution vulnerability exists in Microsoft Azure Site Recovery. An attacker could exploit this vulnerability to execute code on the target host...

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-67843)

Microsoft Azure Site Recovery ASR is a DRaaS provided by Azure for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery suffers from an elevation of privilege vulnerability. An attacker could exploit this vulnerability to elevate privileges...

Siemens SICAM A8000 Web Server Module Authentication Bypass Vulnerability

The SICAM A8000 RTU Remote Terminal Unit series is a modular device family for remote control and automation applications in all energy supply areas.An authentication bypass vulnerability exists in the Siemens SICAM A8000 Web Server Module, which is caused by the component allowing the activation...

Siemens Simcenter STAR-CCM Information Disclosure Vulnerability

Simcenter STAR-CCM is a multiphysics computational fluid dynamics CFD software used to simulate products operating under real-world conditions. an information disclosure vulnerability exists in Siemens Simcenter STAR-CCM due to the use of a public license server where the affected application...

Microsoft Edge has an unspecified vulnerability (CNVD-2022-56255)

Microsoft Edge is a Web browser that comes with post-Windows 10 versions of Microsoft Corporation Microsoft. Microsoft Edge has a security vulnerability that stems from the existence of a remote code execution vulnerability. No detailed vulnerability details are available at this time...

IBM QRadar Network Security Trust Management Issue Vulnerability

IBM QRadar Network Security is a network security manager from IBM, USA. used to provide better visibility and control over activities and users on the network, while using deep packet inspection, heuristics and behavior-based analysis to detect and prevent advanced threats.IBM QRadar Network...

IBM Engineering Requirements Quality Assistant Cross-Site Scripting Vulnerability (CNVD-2022-87649)

IBM Engineering Requirements Quality Assistant is a Watson AI-based software from IBM to assist developers in improving the quality of engineering requirements. All versions of IBM Engineering Requirements Quality Assistant are vulnerable to a cross-site scripting vulnerability that stems from a...

Adobe InCopy Buffer Overflow Vulnerability (CNVD-2022-55643)

Adobe InCopy is a text editing software for creative writing from Adobe, USA. Adobe InCopy suffers from a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, which can be exploited by an attacker to cause a read to exceed the end of an allocated buffer...

Pexip Infinity Resource Management Error Vulnerability (CNVD-2022-54730)

Pexip Infinity is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity versions prior to 27.3 contain a resource management error vulnerability that can be exploited by remote, unauthenticated attackers to cause a software crash and denial of service...

Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2022-57610)

Huawei HarmonyOS is an operating system from Huawei of China. A security vulnerability exists in the Huawei HarmonyOS system application, which stems from a configuration flaw in the phone's activation lock. An attacker could exploit the vulnerability to cause a denial of service...

Siemens SIMATIC eaSie Input Validation Error Vulnerability

SIMATIC eaSie, the digital assistant for automation and process control technology in the Siemens Automation Concept "Total Integrated Automation", is vulnerable to an input validation error that could be exploited by remote attackers to trigger a denial of service on the affected system...

WordPress Opt-in plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. version 1.4.1 of the WordPress Opt-in plugin is vulnerable to cross-site request forgery, which can b...