CVE-2021-27622

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CDrawRaster::LoadImageFromMemory whic...

CVE-2021-27624

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CiXMLIStreamRawBuffer::readRaw which...

CVE-2021-27625

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method IgsData::freeMemory which will trigge...

CVE-2021-31970

Windows TCP/IP Driver Security Feature Bypass Vulnerability...

PYSEC-2021-99

In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validateipv4address, and validateipv46address do not prohibit leading zero characters in octal literals. This may allow a bypass of access control that is based on IP addresses. validateipv4address and...

How an Obscure Company Took Down Big Chunks of the Internet

You may not have heard of Fastly, but you felt its impact when sites didn’t load around the world Tuesday morning...

How to Turn Off Amazon Sidewalk

The company is enlisting your Echo and Ring devices into an internet-sharing mesh network starting Monday. It’s not too late to opt out...

Vulnerabilities in Weapons Systems

"If you think any of these systems are going to work as expected in wartime, youre fooling yourself." That was Bruces response at a conference hosted by US Transportation Command in 2017, after learning that their computerized logistical systems were mostly unclassified and on the Internet. That...

Internet Explorer help

None None...

SAP Internet Graphics Server 缓冲区错误漏洞

SAP Internet Graphics Service is a component of the SAP R/3 enterprise environment that provides graphics services. A memory corruption vulnerability exists in SAP Internet Graphics Service, which can be exploited by an unauthenticated attacker to cause a system crash by submitting a malicious IG...

SAP Internet Graphics Server 缓冲区错误漏洞

SAP Internet Graphics Service is a component of the SAP R/3 enterprise environment that provides graphics services. A memory corruption vulnerability exists in SAP Internet Graphics Service, which can be exploited by an unauthenticated attacker to cause a system crash by submitting a malicious IG...

SAP Internet Graphics Service 缓冲区错误漏洞

SAP Internet Graphics Service is a component of the SAP R/3 enterprise environment that provides graphics services. A memory corruption vulnerability exists in SAP Internet Graphics Service that originates from an input validation error in CDrawRaster::LoadImageFromMemory. An unauthenticated...

June Patch Tuesday: Internet Explorer Finally Laid to Rest

The June 2021 Patch Tuesday cycle offers good news to both IT and website administrators...

SAP Internet Graphics Server 缓冲区错误漏洞

SAP Internet Graphics Service is a component of the SAP R/3 enterprise environment that provides graphics services. A memory corruption vulnerability exists in SAP Internet Graphics Service, which can be exploited by an unauthenticated attacker to cause a system crash by submitting a malicious IG...

Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Metasys Servers, Engines, and Tools Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated...

Weak Password Vulnerability in Xinda Internet Security Internet Behavior Management System

Cinda Network Security is a national high-tech enterprise focusing on the research and application of network security technology. There is a weak password vulnerability in Xinda Internet Behavior Management System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Cloud Research's Employment Platform

Changsha Yunyan Network Technology Co., Ltd. is an Internet company. A SQL injection vulnerability exists in Cloud Research's employment platform. An attacker can utilize the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Seiko Cloud MES

Jinggong Cloud MES, mainly for small and medium-sized manufacturing shop floor management, based on industrial Internet, micro-services, cloud computing, Internet of Things, big data technology architecture, to provide low-cost, fast deployment, easy operation and maintenance of SAAS applications...

Weak Password Vulnerability in citysec Internet Behavior Management System

Wuxi City Security Information Technology Co., Ltd. is a high-tech recognized enterprise specializing in computer network security research and development, sales and service. There is a weak password vulnerability in citysec Internet Behavior Management System, which can be exploited by attacker...

Weak Password Vulnerability in Sleipnir Routing

Changsha Tongxun Computer Technology Co., Ltd. is a company dedicated to the research and development of China's Internet network acceleration solutions, providing ISPs, education, enterprises and other customers with industry-leading Internet caching acceleration and routing products and service...