9172 matches found
CVE-2020-8264
In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...
[SECURITY] Fedora 33 Update: python-py-1.10.0-1.fc33
The py lib is a Python development support library featuring the following tools and modules: py.path: uniform local and svn path objects py.apipkg: explicit API control and lazy-importing py.iniconfig: easy parsing of .ini files py.code: dynamic code generation and introspection py.path: uniform...
[SECURITY] Fedora 32 Update: python-py-1.10.0-1.fc32
The py lib is a Python development support library featuring the following tools and modules: py.path: uniform local and svn path objects py.apipkg: explicit API control and lazy-importing py.iniconfig: easy parsing of .ini files py.code: dynamic code generation and introspection py.path: uniform...
Shanghai Silverfox Information Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-01851)
Shanghai Silver Fox Information Technology Co., Ltd. business scope includes: engaged in computer technology, network technology in the field of technology development, technology transfer, technical services, technical consulting and so on. Shanghai Silver Fox Information Technology Co., Ltd...
Akamai's Technical Enablement and Education Team, Part of the Global Services and Support Organization, Wins 2020 Chief Learning Officer Magazine Gold Award
On October 2020, the Akamai Technical Enablement and Education TE&E Team -- responsible for creating product-training certifications for employees Global Services and Support GSS, customers Akamai University, and channel partners Advanced Partner Enablement -- won its second industry award for...
Agentejo Cockpit Code Issue Vulnerability
Agentejo Cockpit is a management system for managing structured content on websites from Agentejo, Germany. Agentejo Cockpit cockpit-project.org A code issue vulnerability exists that arises from improper design or implementation during code development for a web system or product...
Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers
We, along with the security industry and our partners, continue to investigate the extent of the Solorigate attack. While investigations are underway, we want to provide the defender community with intelligence to understand the scope, impact, remediation guidance, and product detections and...
The vulnerability in the IBM SDK Java Technology Edition development tools relates to the use of an unreliable search path, allowing a perpetrator to execute arbitrary code.
The vulnerability of the IBM SDK Java Technology Edition development tools is related to the use of an unreliable search path. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
How to Increase Your Security Posture with Fewer Resources
With the number of COVID-19 cases increasing, another round of attacks is looming over schools and universities as they move into holiday break and prepare for the spring semester. According to a recent article the Wall Street Journal, there have been ānearly three dozen ransomware attacks agains...
Moderate: Red Hat Security Advisory: java-1.7.1-ibm security update
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
What is Geocoding? ā How to Find Coordinates of An Address
How can your app hook into a geocoding service that offers forward and reverse geocoding and an auto-completion facility? Geocoding turns a location name or address into geocoordinates. The service gets used by thousands of applications like Uber and Grubhub to track and plot their map data. Yet,...
Eclipse Che Cross-Site Request Forgery Vulnerability (CNVD-2021-14164)
Eclipse Che is the Eclipse Foundation's set of Java-based open source online integrated development environment IDE. A cross-site request forgery vulnerability exists in Eclipse Che versions prior to 7.14.0. No detailed vulnerability details are provided at this time...
Pegasystem Pega Platform Cross-Site Scripting Vulnerability (CNVD-2021-28267)
Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. A cross-site scripting vulnerability...
Virtuozzo 7 : java-1.7.0-openjdk / etc (VZLSA-2019-1839)
An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
EulerOS 2.0 SP5 : pcp (EulerOS-SA-2020-2557)
According to the versions of the pcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE...
Zhengzhou Weikou Network Technology Co., Ltd. eEnterprise CMS has a file upload vulnerability
EECO CMS is a marketing enterprise website system based on SEO-friendly development in China. Zhengzhou Weikou Network Technology Co., Ltd. eEnterprise CMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...
Apple's App 'Privacy Labels' Are Hereāand They're a Big Step Forward
It remains unclear how effective the warnings will be, but the attempt alone is a promising development...
Logic Flaw Vulnerability in WebView JsBridge
WebView is the term that refers to the web page view. It can be embedded in the mobile terminal to realize the front-end of the hybrid development, most of the hybrid development framework is based on the WebView mode for secondary development. WebView JsBridge has a logic flaw vulnerability that...
