CVE-2020-5229

Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthermore, the hashes are salted using the username instead of a random salt, causing hashes for users with the same username and password to collide which is problematic especially...

Default credentials

Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthermore, the hashes are salted using the username instead of a random salt, causing hashes for users with the same username and password to collide which is problematic especially...

CVE-2020-5229 Opencast stores passwords using outdated MD5 hash algorithm

Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthermore, the hashes are salted using the username instead of a random salt, causing hashes for users with the same username and password to collide which is problematic especially...

SQL Injection Vulnerability in Intelligent Meter Management System of Qingdao Automation Instrument Co.

Intelligent meter cluster management system is an industrial control management system that controls statistics and manages some of the data in the energy industry. There is a SQL injection vulnerability in the Intelligent Instrumentation System of Qingdao Automation Instrumentation Co., Ltd, whi...

CloudLock server-side Windows version (public cloud version) suffers from sql injection bypass vulnerability

Cloud lock is a server essential security protection and operation and maintenance management SAAS solution, is a CS architecture for management of the product, through the PC to support windows/linux server cross-platform real-time, batch, remote security management. The public cloud version of...

カスタマー サポート データベースのアクセス構成の誤りについて

本記事は、Microsoft Security Response Center ブログ “Access Misconfiguration for Customer Support Database” 2020 年 1 月 22 日 米国時間...

CVE-2019-19801

In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases...

CVE-2020-2640

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Target Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

Oracle Enterprise Manager for Oracle Database cpujan2020 Multiple Remote Security Vulnerabilities

Description Oracle Enterprise Manager for Oracle Database is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over HTTP protocol. The 'Change Manager - web based', 'Discovery Framework', 'Enterprise Config Management', and 'Target Management' components ar...

SQL Injection Vulnerability in School Worry-Free Teacher Evaluation System

The Schoolfree Teacher Evaluation System is a school teaching management system. A SQL injection vulnerability exists in SchoolWorryFree Teacher Evaluation System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in 51 Micro Voting System

51 Micro Voting System is a platform system that provides customers with online voting services through the Internet. There is a SQL injection vulnerability in 51MicroVoting System, which can be exploited by attackers to obtain sensitive information in the database...

Wenzhou Yougu Technology Co., Ltd. website building system SQL injection vulnerability

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Science and Technology Co., Ltd. station building system there are SQL injection...

SQL Injection Vulnerability in UsualToolCMS of Chengdu Comfidonte Network Technology Co.

UsualToolCMS UTCMS is a content management system as well as a rapid site building framework. UsualToolCMS by Chengdu Comfidonte Network Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2019-10205

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry...

SQL Injection Vulnerability in opensns system

OpenSNS is an open-source social networking system from Jiaxing Wantsky Information Technology Company in China. The opensns system suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Ocean CMS Backend ad***_vi***.php File

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. There is a SQL injection vulnerability in the advi.php file in the background of Ocean CMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in pr***.asp Page of Shanghai Silverfox Information Technology Co.

Shanghai Silver Fox Information Technology Co., Ltd Silver Fox Power is a high-tech company dedicated to enterprise information technology services. Shanghai Silverfox Information Technology Co., Ltd. building system pr.asp page SQL injection vulnerability exists. Attackers can use the...

SQL injection vulnerability in the us***.php page of BaiLian Mall system

BaiLian mall system is a set of computer version of the mall + mobile version of the website + micro-mall enterprise weibo public number secondary development + BaiLian bearing network www.bearing.cn professional promotion and publicity in one of the new marketing solutions. SQL injection...

SQL Injection Vulnerability in Panmicro e-cology OA System

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...

Default credentials

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...