Unspecified Vulnerability in PuTTY

PuTTY is a suite of free Telnet, Rlogin and SSH client software from Simon Tatham Software Developers. The software is primarily used for remote administration of Linux systems. A security vulnerability exists in PuTTY versions prior to 0.73. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in Kaixin Quote System V2.0 da***.aspx Page

The QI Quotation System is primarily for use by manufacturing companies. For incoming BOM list price monitoring. The system will automatically record the past quoted prices of BOM products, so that the purchasing staff can easily give new quotes. A SQL injection vulnerability exists in the Qixing...

SQL Injection Vulnerability in Experimental Teaching Management System of Shanghai Wanxin Computer Information Technology Co.

Shanghai Wanxin Technology Company is a private high-tech enterprise established in June 2001, which is mainly engaged in the research, development, production and sales of university laboratory informationization management platform and computer information system security protection products, a...

SQL injection vulnerability in the en***.cl***.php file of Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system en.cl.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in the ad***.php page of Tuan ah VIP movie system (CNVD-2019-43831)

Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. A SQL injection vulnerability exists in the ad.php page of Tuan Ah VIP Movie System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in us*** Parameters of BioReda's Security Management System Platform

Based on the latest B/S architecture design, Bio Raider Security Management Platform is a digital, networked and security integrated system platform. Bio Raider Security Management System can be applied to government, enterprises, prisons, schools, smart communities and other security requirement...

CVE-2019-4509

IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obtain sensitive information. IBM X-Force ID: 164430...

CVE-2019-4334

IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against the system. IBM X-Force ID: 161271...

wget: Information exposure in set_file_metadata function in xattr.c

setfilemetadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information e.g., credentials contained in the URL by reading this attribut...

SQL Injection Vulnerability in JeePlus Rapid Development Platform

JeePlus rapid development platform is an integrated code generator java rapid development framework . A SQL injection vulnerability exists in JeePlus Rapid Development Platform. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in PHPMyWind Website Building System (CNVD-2019-43878)

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . There is a SQL injection vulnerability in the PHPMyWind website builder system, which can be exploited by an attacker to obtain sensitive information from the database...

SQL injection vulnerability in seacms backend (CNVD-2019-43675)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the backend of seacms, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-43682)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the backend of seacms, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-43680)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the backend of seacms, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in seacms backend (CNVD-2019-43676)

SeaCMS is based on PHP + MySql technology development of video on demand ocean film and television management system seacms, ocean CMS is based on PHP + MySql technology development of video on demand system. There is a SQL injection vulnerability in the backend of seacms, which can be exploited ...

SQL Injection Vulnerability in Shanghai Kaijie Information Website Building System

Founded in 2009, Kaijie Information is a high-tech enterprise engaged in Internet application and software development, mainly serving in the field of e-commerce, e-government and enterprise Internet service. A SQL injection vulnerability exists in Shanghai Kaijie Information's website building...

Advantech WISE-PaaS/RMM XML External Entity Injection Vulnerability

Advantech WISE-PaaS/RMM is an IoT device remote monitoring and management platform. An XML External Entity Injection XXE vulnerability exists in Advantech WISE-PaaS/RMM 3.3.29 and earlier versions. An attacker can exploit this vulnerability to obtain sensitive data...

A Web-Driven World Needs Better Web Security

Web interfaces are everywhere. From social media sites to online shopping portals to your CRM, the humble web interface is now used to access much of the online world. So, it isn’t difficult to see why web applications are a prime target for cybercriminals. Because they’re used by customers and...

SQL Injection Vulnerability in the Front-end of the Intelligent Graphical Management System for Office Premises of New ChengSoft Technology Co.

The new ChengSoft intelligent graphic management system for office buildings adopts universal functional design, is a suitable for ministries and commissions, provinces, cities, districts and counties organ affairs management departments as well as large-scale enterprises, scientific research...

JetBrains Security Bulletin Q3 2019

FYI Security JetBrains Security Bulletin Q3 2019 Robert Demmer In the third quarter of 2019, we resolved a series of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...