CVE-2023-2220

Dream Technology mica, versions up to 3.0.5, contains an XSS vulnerability in the Form Object Handler that can be triggered remotely. The issue affects an unknown function within that component and is classified as problematic with potential cross-site scripting. Several connected sources corrobo...

Dream Technology mica 跨站脚本漏洞

Dream Technology mica is a Spring Cloud microservices development core package from China-based Dream Technology. A cross-site scripting vulnerability exists in Dream Technology mica 3.0.5 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the Form Object Handler...

PT-2023-18381 · Dream Technology · Mica

Name of the Vulnerable Software and Affected Versions: Dream Technology mica versions up to 3.0.5 Description: A problematic issue has been identified, affecting an unknown function of the component Form Object Handler. This issue leads to cross site scripting and can be exploited remotely...

CVE-2023-30441

IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188...

Security Bulletin: CVE-2023-30441 affects IBM® SDK, Java™ Technology Edition

Summary CVE-2023-30441 affects IBM SDK, Java Technology Edition. An update has been released to address the vulnerability. Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE components could expose sensitive information usi...

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition

Summary This bulletin covers all applicable Java SE CVEs published by Oracle as part of their January 2023 Critical Patch Update. For more information please refer to Oracle's January 2023 CPU Advisory and the X-Force database entries referenced below. Vulnerability Details CVEID:CVE-2023-21830...

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition

Summary This bulletin covers all applicable Java SE CVEs published by Oracle as part of their October 2022 Critical Patch Update. For more information please refer to Oracle's October 2022 CPU Advisory and the X-Force database entries referenced below. Vulnerability Details CVEID:CVE-2022-21628...

Beyond Traditional Security: NDR's Pivotal Role in Safeguarding OT Networks

Why is Visibility into OT Environments Crucial? The significance of Operational Technology OT for businesses is undeniable as the OT sector flourishes alongside the already thriving IT sector. OT includes industrial control systems, manufacturing equipment, and devices that oversee and manage...

Binary Vulnerability in Unisys Browser by Unisys Software Technology Co.

Unisys Software Technology Co., Ltd. is a company specializing in the development and service of operating systems. Unisys Software Technology Limited Unisys Browser suffers from a binary vulnerability that can be exploited by attackers to execute arbitrary code...

IBM SDK, Java Technology Edition 加密问题漏洞

IBM SDK, Java Technology Edition is a software development kit for Java application development from International Business Machines IBM. IBM SDK, Java Technology Edition is vulnerable to a cryptographic issue. An attacker could exploit this vulnerability to obtain sensitive information...

Command Execution Vulnerability in Tianyi Application Virtualization System of Xi'an Ruiyou Information Technology Information Co.

Skywing Application Virtualization System is a virtualization platform based on application server architecture. Xi'an Ruiyou Information Technology Information Co., Ltd Skywing Application Virtualization System has a command execution vulnerability that can be exploited by attackers to execute...

Command Execution Vulnerability in DSS Monitoring Management Application Platform of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. A command execution vulnerability exists in the DSS surveillance management application platform of Zhejiang Dahua Technology Company Limited, which can be exploited by an attacker to execute...

Logic flaw vulnerability in kingh5stream of Beijing Asian Control Technology Development Co. Ltd (CNVD-2023-50681)

KingH5Stream is an excellent live video streaming solution based on HTML5 technology, with low latency, high performance, easy deployment and other advantages. Beijing Asian Control Technology Development Co. kingh5stream There is a logic flaw vulnerability, which can be exploited by attackers to...

CVE-2023-26980

PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to boot directly to Android during the boot process. NOTE: the vendor disputes this because the attack is not feasible: the home launcher wil...

Race condition

DISPUTED PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to boot directly to Android during the boot process. NOTE: the vendor disputes this because the attack is not feasible: the home...

Webinar: Tips from MSSPs to MSSPs – Building a Profitable vCISO Practice

In today's fast-paced and ever-changing digital landscape, businesses of all sizes face a myriad of cybersecurity threats. Putting in place the right people, technological tools and services, MSSPs are in a great position to ensure their customers' cyber resilience. The growing need of SMEs and...

CVE-2023-26980

PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to boot directly to Android during the boot process. NOTE: the vendor disputes this because the attack is not feasible: the home launcher wil...

CVE-2023-26980

PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software and force the OS to boot directly to Android during the boot process. NOTE: the vendor disputes this because the attack is not feasible: the home launcher wil...

CVE-2023-26980

The CVE-2023-26980 entry concerns PAX Technology PAX A920 Pro PayDroid 8.1. The underlying issue is described as a Race Condition that could allow an attacker to bypass the payment software and force the OS to boot directly into Android during boot. Connected sources confirm the affected product/...

Anarchy in the UK? Not Quite: A look at the cyber health of the FTSE 350

The attack surface of the United Kingdom's 350 largest publicly traded companies has—drum roll, please—improved. But it could be better. Those are the high level findings of the latest in Rapid7's looks at the cybersecurity health of companies tied to some of the globe's largest stock indices. Th...