Command Execution Vulnerability in EG3220 of Beijing StarNet Ruijie Network Technology Co.

Ltd. EG3220 is a new generation of multi-service security gateway. The EG3220 has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

IDCCMS security vulnerabilities

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idccms v1.35, which was discovered via the component admin/bannerdeal.php?mudi=add, and...

Intel Context Sensing Technology security vulnerabilities

Intel Context Sensing Technology is a group of technologies from Intel Corporation that allow devices to understand and adapt to contextual information about their surroundings in order to provide a more intelligent and personalized user experience. A security vulnerability previously existed in...

Information leakage vulnerability in urban security monitoring DSS system of Zhejiang Dahua Technology Co.(CNVD-2024-25769)

Zhejiang Dahua Technology Co., Ltd. is a leading supplier and solution provider of surveillance products. An information leakage vulnerability exists in Zhejiang Dahua Technology Company Limited's City Security Surveillance DSS system, which can be exploited by an attacker to obtain all user...

XML Entity Injection Vulnerability in Linkworks Collaborative Office Management Platform at Quanta Technology Co.

Linkworks Collaboration Management Platform is a BIM collaboration platform developed by Quanta. An XML entity injection vulnerability exists in Linkworks Collaborative Office Management Platform of Quanta Technology Corporation, which can be exploited by attackers to obtain sensitive information...

5 key MDR differentiators to look for to build stronger security resilience

Organizations looking to address the skills gap and bring greater efficiency as their business grows and their attack surface sprawls are turning to MDR providers at an accelerated pace. We’ve seen predictions from top analyst firms signaling the rapid rate of adoption of an MDR provider by 2025...

Intel CST Software Advisory - Lenovo Support US

No description provided...

Intel DTT Software Installer Advisory - Lenovo Support US

No description provided...

CVE-2024-33250

An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268Leo and SRS/4.0.195Leo allows a remote attacker to execute arbitrary code via a crafted request...

CVE-2023-38264

The IBM SDK, Java Technology Edition's Object Request Broker ORB 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578...

CVE-2023-38264

The IBM SDK, Java Technology Edition's Object Request Broker ORB 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578...

SUSE CVE-2023-38264

The IBM SDK, Java Technology Edition's Object Request Broker ORB 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578...

CVE-2024-33250: Server-Side Request Forgery (SSRF)

An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268Leo and SRS/4.0.195Leo allows a remote attacker to execute arbitrary code via a crafted request...

CVE-2023-38264: Deserialization of Untrusted Data

The IBM SDK, Java Technology Edition's Object Request Broker ORB 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578...

idccms security vulnerabilities

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Brokerage System is a cloud management brokerage system from China's Net Titanium Technology, Inc. A security vulnerability exists in idccms version 1.36, which contains a cross-site request forgery CSRF vulnerability...

idccms security vulnerabilities

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Brokerage System is a cloud management brokerage system from China's Net Titanium Technology, Inc. A security vulnerability exists in version 1.35 of idccms, which contains a cross-site request forgery CSRF vulnerability...

Microsoft Windows NTFS resource management error vulnerabilities

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. A resource management error vulnerability exists in Microsoft Windows NTFS. The following products and versions are affected:Window...

OFCMS security vulnerabilities

Zhongtian Network Technology OFCMS is a content management system CMS developed in Java language by China Zhongtian Network Technology Company. A security vulnerability exists in OFCMS version V1.1.2, which originates from an easy SQL injection attack via a new table function...

idccms security vulnerabilities

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Brokerage System is a cloud management brokerage system from China's Net Titanium Technology, Inc. A security vulnerability exists in version 1.35 of idccms, which contains a cross-site request forgery CSRF vulnerability...

IBM App Connect Enterprise security vulnerabilities

IBM App Connect Enterprise combines the existing industry-trusted technology of IBM Integration Bus with IBM App Connect Professional and cloud technology. It provides a platform that supports the comprehensive integration needs of the modern digital enterprise. IBM App Connect Enterprise has a...