CVE-2021-31899

In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-only mode...

Why Developers Are Writing Apps on Our Edge Platform

A lot of companies talk about edge computing today, but at Akamai, we've been doing it for more than 20 years...

Information leakage vulnerability in H5S video platform of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology is serving customers with video technology and is committed to IoT video development simplicity. There is an information leakage vulnerability in the H5S video platform of ZeroVision Technology Shanghai Co. that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Yuanxin Technology (Stock) Company's Website Building System

Founded in January, 2002, Yonsei Technology Co. It is a company that provides total website planning, website design, web design, programming, web production, internet marketing, web hosting and related web design value-added services. A SQL injection vulnerability has been identified in the...

CVE-2021-22677

An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-service condition or code execution on the SimpleLink Wi-Fi MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to...

CVE-2021-22673

The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK...

What is minification and why is it needed❓ The Advantages Of Minification

This concept might look simple to understand but it requires deep-understanding for one to interact with the concept properly and know what it entails and what it doesn’t. A bunch of developers use minification in website development, in order to have fast and active web. Minification can be...

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34781)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Elasticsearch code-related vulnerabilities

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON . A code issue vulnerability exists in Elasticsearch ODFE Open Distro versions prior...

SUSE SLES12 Security Update : avahi (SUSE-SU-2021:1494-1)

This update for avahi fixes the following issues : CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

CVE-2021-22547

In IoT Devices SDK, there is an implementation of calloc that doesn't have a length check. An attacker could pass in memory objects larger than the buffer and wrap around to have a smaller buffer than required, allowing the attacker access to the other parts of the heap. We recommend upgrading th...

CVE-2021-29240

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

CVE-2021-29240

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

Code injection

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

CVE-2021-29240

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

Why Software Supply Chain Attacks Are Inevitable and What You Must Do to Protect Your Applications

Most organizations have limited visibility over their software supply chain and little control of up to 95% of the software code they utilize. With multiple code sources from multiple software vendors, the number of known and unknown vulnerabilities quickly grows beyond the capabilities of intern...

Critical Patch Out for Critical Pulse Secure VPN 0-Day Under Attack

Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being actively exploited in the wild by at least two different threat actors. Tracked as CVE-2021-22893 CVSS score 10, the flaw concerns "multiple us...

SQL Injection Vulnerability in Website Building System of Yuanxin Technology (Stock) Company (CNVD-2021-35855)

Ltd. was founded in January, 2002 and is a total web planning, web design, web design, programming, web production, internet marketing, web hosting and related web design value-added services company. It is a company that provides total website planning, website design, web design, programming, w...

CVE-2021-29240: Undefined Security Weakness

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

PT-2021-18137

Name of the Vulnerable Software and Affected Versions: CODESYS Development System 3 versions prior to 3.5.17.0 Description: The issue concerns the Package Manager of the CODESYS Development System 3, which does not validate packages before installation. This oversight allows for the potential...