Security Bulletin: Rational Developer for System z - Add support for TLS v1.2 with MS-CAPI in HCE

Summary IBM Rational Developer for System z has added support for TLS v1.2 with MS-CAPI in the Host Connection Emulator Vulnerability Details CVEID: CVE-2017-1796 DESCRIPTION: IBM Developer for z Systems uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt...

Security Bulletin: Rational Developer for System z CPU utilization (CVE-2014-0963)

Summary IBM Rational Developer for System z is affected by a problem related to the SSL implementation which, under very specific conditions, can cause CPU utilization to rapidly increase. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts lik...

Code42 Incydr Series: Secure data in the age of remote work

As 2020 began, security leaders were already abuzz about the data security for the growing remote workforce. Fast forward to today, and nearly half of the U.S. labor force is now WFH full time. A recent study by OpenVPN shows 90% of IT and Security pros believe that remote workers are not secure ...

Aruba Airwave Software Remote Code Execution Vulnerability

Aruba Airwave Software is a network monitoring software that helps users view real-time data and situational reports for every user, device, and segment of the network. A remote code execution vulnerability exists in Aruba Airwave Software versions prior to 1.3.2. An attacker can exploit this...

Aruba Airwave Software Unauthorized Access Vulnerability

Aruba Airwave Software is a network monitoring software that helps users view real-time data and situational reports for every user, device, and segment of the network. An unauthorized access vulnerability exists in Aruba Airwave Software versions prior to 1.3.2. An attacker could exploit this...

Stored Cross-site Scripting Vulnerability in Pollution Source Online Monitoring System of Beijing Wanwei Yingchuang Technology Development Co.

Beijing Wanwei Yingchuang Technology Development Co., Ltd. is committed to the research, development and application of products and technologies in the field of environmental protection Internet of Things. A stored cross-site scripting vulnerability exists in the online pollution source monitori...

Micro Focus Operation Bridge Manager Code Injection Vulnerability

Micro Focus Operation Bridge Manager is an enterprise level monitoring software from Micro Focus UK. The software uses HTML5 to visually summarize service operations. A code injection vulnerability exists in multiple versions of Micro Focus Operation Bridge Manager. The vulnerability could allow ...

Denial of Service Vulnerability in ForceControl Technologies ForceControl

Forcecontrol is a monitoring and configuration software, mainly used for data acquisition and monitoring control. A denial of service vulnerability exists in ForceControl, which can be exploited by attackers to cause the software to crash and restart...

Denial of Service Vulnerability in AnyView (Network Police) Network Monitoring Software

AnyView Network Police network monitoring software is one of the most professional LAN network monitoring software products in China. AnyView Network Monitor has a denial of service vulnerability that can be exploited by attackers to cause a blue screen...

Buffer Overflow Vulnerability in ForceControl ForceControl httpsvr.exe

Forcecontrol is a monitoring and configuration software, mainly used for data acquisition and monitoring control. A buffer overflow vulnerability exists in ForceControl httpsvr.exe, which can be exploited by an attacker to cause a remote denial of service attack...

Code Injection Vulnerability in ForceControl Technology ForceControl

Forcecontrol is a monitoring and configuration software, mainly used for data acquisition and monitoring control. A code injection vulnerability exists in ForceControl, which can be exploited by an attacker to gain control of the server...

Forcecontrol Technology Forcecontrol has information leakage vulnerability

Forcecontrol is a monitoring and configuration software, mainly used for data acquisition and monitoring control. An information disclosure vulnerability exists in Forcecontrol, which can be exploited by attackers to obtain sensitive information...

Server side request forgery (ssrf)

InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request...

Denial of Service Vulnerability in Zijin Bridge Monitoring and Configuration Software

Zijinqiao monitoring and configuration software is a professional Zijinqiao monitoring and configuration software, which adopts C/S architecture and has database processing technology and graphic system. A denial of service vulnerability exists in Zijinqiao Monitoring and Configuration Software. ...

Information leakage vulnerability in Zijinqiao monitoring configuration software

Zijinqiao monitoring and configuration software is a professional Zijinqiao monitoring and configuration software, which adopts C/S architecture and has database processing technology and graphic system. There is an information disclosure vulnerability in Zijinqiao Monitoring and Configuration...

Information Disclosure Vulnerability in Zijin Bridge Monitoring Configuration Software (CNVD-2020-59819)

Zijinqiao monitoring and configuration software is a professional Zijinqiao monitoring and configuration software, which adopts C/S architecture and has database processing technology and graphic system. There is an information leakage vulnerability in Zijinqiao Monitoring and Control Software. A...

Remote stack overflow vulnerability in Zijin Bridge monitoring and configuration software (CNVD-2020-59818)

Zijinqiao monitoring and configuration software is a professional Zijinqiao monitoring and configuration software, which adopts C/S architecture and has database processing technology and graphic system. A remote stack overflow vulnerability exists in Zijinqiao Monitoring and Configuration...

Remote Stack Overflow Vulnerability in Zijin Bridge Monitoring and Configuration Software

Zijinqiao monitoring and configuration software is a professional Zijinqiao monitoring and configuration software, which adopts C/S architecture and has database processing technology and graphic system. A remote stack overflow vulnerability exists in Zijinqiao Monitoring and Configuration...

Command injection

On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause the Kernel Routing Table KRT queue to become stuck. KRT is the module within the Routing Process Daemon RPD that synchronized the routing...

CVE-2019-7276

creationtimestamp| type| source ---|---|--- 2020-10-15 15:07:04+00:00| seen| MISP/cbd9bbb3-3f53-4610-9d91-9191ff0a9ca8 2020-10-16 06:56:57+00:00| seen| MISP/25aef508-b116-4d75-84b2-b6ceff906e44 2023-03-29 14:49:46+00:00| seen|...