Qualcomm 芯片 缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip has a security vulnerability that arises from an improper...

Huawei Smartphone 安全漏洞

Huawei Smartphone is a smartphone from Huawei, a Chinese company. A security vulnerability exists in Huawei HarmonyOS, which arises from an improperly designed or implemented network system or product code development process...

Totolink A720R Command Execution Vulnerability

The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. The TOTOLINK A720R suffers from a command execution vulnerability that stems from improper design or implementation during code development of the network system. The vulnerability can be exploited by an...

Launching ‘Secret Detection’ to keep your Cloud ‘Secrets’ safe

Most digital applications we work on require some type of credentials –– to connect to a database with a username/password, to access computer programs via authorized tokens, or API keys to invoke services for authentication. Credentials a.k.a ‘Secrets’ are pieces of user or system level...

Pega Infinity patches authentication vulnerability

Security researchers came across a Pega Infinity vulnerability through participation in Apple’s bug bounty program, after focusing on vendors that supplied technology to Apple. By using Burp Suite—an integrated platform for performing security testing of web applications—the security researchers...

[SECURITY] Fedora 32 Update: atasm-1.09-1.fc32

ATasm is a 6502 command-line cross-assembler that is compatible with the original Mac/65 macro-assembler released by OSS software. Code development can now be performed using "modern" editors and compiles with lightning speed...

[SECURITY] Fedora 33 Update: atasm-1.09-1.fc33

ATasm is a 6502 command-line cross-assembler that is compatible with the original Mac/65 macro-assembler released by OSS software. Code development can now be performed using "modern" editors and compiles with lightning speed...

Fedora: Security Advisory for atasm (FEDORA-2021-681b6ea532)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DualShield Code Issue Vulnerability

Deepnet DualShield is an application from Deepnet UK. that provides multi-factor authentication. A code issue vulnerability exists in DualShield that arises from improper design or implementation during code development of a network system or product...

Qognify Ocularis Code Issue Vulnerability

A code issue vulnerability exists in Qognify Ocularis that arises from improper design or implementation during code development for a network system or product...

Pelco Digital Sentry Server Code Issue Vulnerability

A code issue vulnerability exists in Pelco Digital Sentry Server that arises from improper design or implementation during code development for a network system or product...

Monitorr Code Issue Vulnerability

A code issue vulnerability exists in Monitorr that arises from improper design or implementation during code development of a network system or product...

Recent enhancements for Microsoft Power Platform governance

An emerging trend in digital transformation efforts has been the rise of low-code development platforms. Of course, these low-code platforms must be grounded in best-of-breed governance capabilities which include security and compliance features. Without strong governance, the full benefits of...

Halo Code Problem Vulnerability (CNVD-2020-60320)

Halo is a personal blogging system for individual developers. A code issue vulnerability exists in halo version 1.1.3. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. No detailed vulnerability details are provided at...

MediaWiki code issue vulnerability (CNVD-2020-58046)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A code issue vulnerability exists in MediaWiki. The vulnerability stems from ...

Red Hat CloudForms Code Issue Vulnerability

Red Hat CloudForms is a hybrid infrastructure management platform from Red Hat, Inc. The platform provides deployment, management, and other capabilities across virtual machines, clouds, containers, and physical infrastructure. A code issue vulnerability exists in Red Hat CloudForms. The...

Red Hat IPA Code Issue Vulnerability

Red Hat IPA is a domain controller for Linux/UNIX platforms from Red Hat. A code issue vulnerability exists in Red Hat IPA. The vulnerability arises from an improperly designed or implemented code development process for a network system or product. No detailed vulnerability details are provided ...

Atlassian Jira Code Issue Vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira. The vulnerability stems from an improperly designed or implemented code...

Siemens Mendix Code Issue Vulnerability

Siemens Mendix is a low-code application development platform from Siemens. The platform provides application development, testing, deployment and iteration. A code issue vulnerability exists in Siemens Mendix versions 7.23.5 and earlier. The vulnerability arises from an improperly designed or...

Microsoft Launches Azure DevOps Bug Bounty Program

Microsoft lifted the curtain on a new Azure DevOps bug bounty program, designed to sniff out flaws in its Azure DevOps online services and servers. Azure DevOps is a cloud service launched in 2018 that enables collaboration on code development across the breadth of a development lifecycle...