Smartbi's Big Data Analytics-BI Technology Platform Has Information Leakage Vulnerabilities

Ltd. is committed to providing one-stop business intelligence solutions for enterprise customers. There is an information leakage vulnerability in Smartbi Big Data Analytics-BI technology platform. An attacker can exploit the vulnerability to obtain sensitive information...

Smartbi Big Data Analytics Platform of Guangzhou Sematic Software Company Limited Has Logic Flaw Vulnerability

Guangzhou Sematic Software Co., Ltd. is a company dedicated to providing one-stop business intelligence solutions for enterprise customers. A logic flaw vulnerability exists in the Smartbi Big Data Analytics Platform of Guangzhou Sematic Software Limited, which can be exploited by attackers to...

2021 KuppingerCole Leadership Compass names Imperva an overall leader for Database and Big Data Security

It is my pleasure to report that in their 2021 overview of the market for Database and Big Data Security solutions, leading technology analyst KuppingerCole has identified Imperva as an Overall Leader for the first time. Imperva scored five out of five for product security, functionality,...

Deep learning: An explanation and a peek into the future

Deep learning is one of the most advanced forms of machine learning, and is showing new developments in many industries. In this article, well explain the concept and give some examples of the latest and greatest ways its being used. What is deep learning? There have been many attempts at creatin...

Information Leakage Vulnerability in Website Building System of Fansoft Software Co.

hereinafter referred to as "Fansoft", founded in 2006, is a professional big data BI and analytics platform provider in China, focusing on business intelligence and data analytics, dedicated to providing one-stop business intelligence solutions for global enterprises. There is an information...

Command execution vulnerability in Apache hama

Apache Hama is a big data analytics framework using the Bulk Synchronous Parallel BSP computational model. Apache hama suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Cybercrime Moves to the Cloud to Accelerate Attacks Amid Data Glut

Cybercriminals are embracing cloud-based services and technologies in order to accelerate their attacks on organizations and better monetize their wares, researchers have found. This is largely driven by cybercriminals who sell access to what they call “clouds of logs,” which are caches of stolen...

RegTech explained: a crucial toolset for the financial industry

Every organization in the financial industry needs to meet certain regulatory obligations, even if it’s just filing a tax return or submitting an annual report. In certain industries, such as financial services, theyve added their own additional sets of rules that must be adhered to. For example,...

IBM Security Guardium Big Data Intelligence (SonarG) Information Disclosure Vulnerability

IBM Security Guardium and IBM Security Guardium Big Data Intelligence SonarG are both products of IBM Corporation in the U.S. IBM Security Guardium is a suite of platforms that provide data protection capabilities. The platform includes features such as customized UI, report management, and...

CVE-2020-4254

IBM Security Guardium Big Data Intelligence 1.0 SonarG uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560...

CVE-2020-4254

IBM Security Guardium Big Data Intelligence 1.0 SonarG uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560...

Code injection

IBM Security Guardium Big Data Intelligence 1.0 SonarG uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560...

CVE-2020-4254

IBM Security Guardium Big Data Intelligence (SonarG) 1.0 is affected by CVE-2020-4254 due to weaker-than-expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. The IBM Security Guardium Big Data Intelligence product was specifically affected (versi...

CVE-2020-4254

IBM Security Guardium Big Data Intelligence 1.0 SonarG uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560...

Auditing Your Database – Is It Enough For Your Data Security Needs?

Audit trails have been a feature of databases for a long time, but are they still compatible with todays data security demands? What do you need to do, as a security officer, to get the most information about what’s happening to your company’s data? Are audit trail features impregnable to possibl...

Introduction to SQL: Examples, Best Practices and Pitfalls

SQL Structured Query Language has been with us for more than half a century and it’s not going away anytime soon. Popular in both traditional relational databases and newer NoSQL databases technologies, SQL is widely used for data analytics, Big Data processing, coding languages, and more. I’m a...

Command Execution Vulnerability in AmarBCR of Shanghai Anshuo Information Technology Co.

AmarBCR is a big data correlation risk monitoring system developed by Shanghai Anshuo Information Technology Co. AmarBCR of Shanghai Anshuo Information Technology Co. Ltd. suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands...

The vulnerability of the REST API interface for managing physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows a attacker to trigger a service failure.

The vulnerability of the REST API interface for managing physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger...

The vulnerability of the REST API interface for controlling physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows attackers to enhance their privileges.

The vulnerability of the REST API interface for controlling physical infrastructure and virtual environments of Cisco UCS Director and Cisco UCS Director Express for Big Data is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance...

The vulnerability of the REST API interface for controlling physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows attackers to enhance their privileges.

The vulnerability of the REST API interface used for controlling physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance...