Command Execution Vulnerability in Wave ClusterEngine (CNVD-2021-30860)

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. A command execution vulnerability exists in Wave ClusterEngine. An attacker can exploit this vulnerability to gain server privileges...

CVE-2021-26805

Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service DoS by running the application with a malicious WAV file...

Unauthorized Access Vulnerability in Wave ClusterEngine

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. An unauthorized access vulnerability exists in Wave ClusterEngine, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Wave ClusterEngine (CNVD-2021-30110)

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. A command execution vulnerability exists in Wave ClusterEngine, which can be exploited by an attacker to gain server control privileges...

Information Disclosure Vulnerability in TSCE of Wave Group Ltd.

Wave owns three listed companies, namely Wave Information, Wave Software and Wave International, and its business covers four industry clusters, namely cloud data center, cloud service big data, smart city and smart enterprise. An information disclosure vulnerability exists in TSCE of Wave Group...

Rapid7 Recognized as a Strong Performer in the Inaugural Forrester Wave™ for MDR, Q1 2021

Independent research firm cites Rapid7 MDR’s “security professionals with extensive incident response and threat hunting experience” delivering a “white-glove, behavioral detection-inspired” service. Detection and response is a critical component to any security program, but standing up an...

USN-4826-1 soundtouch vulnerabilities

It was discovered that SoundTouch incorrectly handled certain WAV files. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM. CVE-2017-9258, CVE-2017-9259, CVE-2017-9260 It was discovered that SoundTouch incorrectly handled...

Denial of Service Vulnerability in Pothole App

Tencent Wave Cave app is a comic book reading platform that gathers a large number of users who love the second generation. A denial-of-service vulnerability exists in Wave Cave App, which can be exploited by attackers to cause denial-of-service attacks...

Imperva recognized as a ‘Leader’ in The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021 Report

We are delighted to share that Imperva has been named a leader in The Forrester Wave: DDoS Mitigation Solutions, Q1 2021 report, a trusted source for technology buyers which helps security and risk professionals select the right vendor for their needs. You can download a copy of the report here...

Akamai Identified as a Leader in DDoS Mitigation by Forrester

This week, Akamai was again recognized as a Leader in the latest The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021. Akamai has also been recognized by Forrester as a Leader in its most recent The Forrester Wave™: Zero Trust eXtended Ecosystem Platform Providers, Q3 2020, The Forrester New...

Akamai Identified as a Leader in DDoS Mitigation by Forrester

This week, Akamai was again recognized as a Leader in the latest The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021...

Wave Inspur ClusterEngine Parameter Injection Vulnerability

Wave Inspur ClusterEngine is an application software from China's Wave Corporation. It provides management of jobs submitted by hardware and software in a cluster system. A security vulnerability exists in Inspur ClusterEngine V4.0, which can be exploited by remote attackers to send malicious log...

Microsoft Dynamics Cross-Site Scripting Vulnerability

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management, and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics. The following...

Command Execution Vulnerability in Wave ClusterEngine V4.0

Wave ClusterEngine is a cluster management software developed by Wave. A command execution vulnerability exists in Wave ClusterEngine V4.0, which can be exploited by an attacker to gain server privileges...

Design/Logic Flaw

An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...

Command Execution Vulnerability in Wave ClusterEngine

Wave ClusterEngine is a cluster management software developed by Wave. A command execution vulnerability exists in Wave ClusterEngine. An attacker can exploit this vulnerability to gain server privileges...

Apple macOS AudioToolboxCore Wave Header Parsing Sign Extension Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the AudioToolbox library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

Azure Sentinel achieves a Leader placement in Forrester Wave, with top ranking in Strategy

I’m thrilled to announce Forrester Research has named Microsoft Azure Sentinel as a “Leader” in The Forrester Wave: Security Analytics Platform Providers, Q4 2020. When we released Azure Sentinel almost a year ago—the industry’s first cloud-native SIEM on a major public cloud—our goal was to...

Azure Sentinel achieves a Leader placement in Forrester Wave, with top ranking in Strategy

I’m thrilled to announce Forrester Research has named Microsoft Azure Sentinel as a “Leader” in The Forrester Wave: Security Analytics Platform Providers, Q4 2020. When we released Azure Sentinel almost a year ago—the industry’s first cloud-native SIEM on a major public cloud—our goal was to...

SDL: heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMAADPCMdecode in audio/SDLwave.c...