2003 matches found
Cloud Industry CMS suffers from SQL injection vulnerability (CNVD-2020-32505)
Yunye CMS is developed by Yunye Information Technology is a specialized for small and medium-sized enterprise website construction of PHP open source content management system. Yunye CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Securing Smart Manufacturing
“Alexa, turn on the TV.” ”Get it yourself.” This nightmare scenario could play out millions of times unless people take steps to protect their IoT devices. The situation is even worse in industrial settings. Smart manufacturing, that is, Industry 4.0, relies on tight integration between IT system...
Navigating the MAZE: Tactics, Techniques and Procedures Associated With MAZE Ransomware Incidents
Targeted ransomware incidents have brought a threat of disruptive and destructive attacks to organizations across industries and geographies. FireEye Mandiant Threat Intelligence has previously documented this threat in our investigations of trends across ransomware incidents, FIN6 activity,...
Shanghai Danfan Network Technology Co., Ltd. builds website system with SQL injection vulnerability (CNVD-2020-28095)
Shanghai Danfan network science and technology limited company builds the station system is for the chemical industry to provide the security, the high efficiency, the multi-function, the system matching B2B electronic commerce platform specialized website. Shanghai Danfan network science and...
Trend Micro’s Top Ten MITRE Evaluation Considerations
The introduction of the MITRE ATT&CK evaluations is a welcomed addition to the third-party testing arena. The ATT&CK framework, and the evaluations in particular, have gone such a long way in helping advance the security industry as a whole, and the individual security products serving the market...
XSS vulnerability in cloud industry cms (CNVD-2020-31068)
Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Yunye CMS XSS vulnerability, attackers can use the vulnerability to obtain user cookies and other sensitive information...
Policy Compliance Library Updates, April 2020
Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...
Security Bulletin: IBM Maximo Asset Management is vulnerable to cross-site scripting (CVE-2019-4749)
Summary IBM Maximo Asset Management is vulnerable to cross-site scripting. Vulnerability Details CVEID: CVE-2019-4749 DESCRIPTION: IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...
Security Bulletin: IBM Maximo Asset Management is vulnerable to cross-site scripting (CVE-2019-4644)
Summary IBM Maximo Asset Management is vulnerable to cross-site scripting. Vulnerability Details CVEID: CVE-2019-4644 DESCRIPTION: IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...
Cisco IP Phone Harbors Critical RCE Flaw
Cisco is warning of a critical flaw in the web server of its IP phones. If exploited, the flaw could allow an unauthenticated, remote attacker to execute code with root privileges or launch a denial-of-service DoS attack. Proof-of-concept PoC exploit code has been posted on GitHub for the...
New Cyber Threat Index Shows Industries Are Under Attack in Uncertain Times
It has been more than a month since businesses around the world started to implement contingencies in response to the Coronavirus. The Cyber Threat Index Report by Imperva Research Labs tracks changes in traffic and attack trends across multiple industries and countries. This month’s edition look...
Amid COVID-19, Global Orgs See a 148% Spike in Ransomware Attacks; Finance Industry Heavily Targeted
Cyber criminals often exploit fear and uncertainty during major world events by launching cyberattacks. These attacks are often performed with social engineering campaigns leveraging malicious emails that lure victims to install malware that steals financial data and other valuable personal...
Matrix42 Workspace Management 9.1.2.2765 Cross Site Scripting Vulnerability
Matrix42 Workspace Management version 9.1.2.2765 suffers from a persistent cross site scripting vulnerability. Matrix42 Workspace Management 9.1.2.2765 – Stored Cross-Site Scripting =============================================================================== Identifiers...
Shanghai Danfan Network Technology Co., Ltd. station building system ab**.php, se**.php and other pages exist SQL injection vulnerability
Shanghai Danfan network science and technology limited company builds the station system is for the chemical industry to provide the security, the high efficiency, the multi-function, the system matching B2B electronic commerce platform specialized website. Shanghai Danfan network science and...
Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US
No description provided...
Sierra Wireless Mobile Broadband Software Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30417 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8948 Summary Description: Sierra Wireless reported a potential security vulnerability in Sierra Wireless Mobile Broadband Software that may allow...
Sierra Wireless Mobile Broadband Software Vulnerability - Lenovo Support US
No description provided...
AMI MegaRAC SP-X BMC Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-29592 Potential Impact: Denial of service, privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2013-4312, CVE-2013-7446, CVE-2014-3631, CVE-2014-5206, CVE-2014-5207, CVE-2014-6410, CVE-2014-7145, CVE-2014-782...
Principles of a Cloud Migration – From Step One to Done
Boiling the ocean with the subject, sous-vide deliciousness with the content. Cloud Migrations are happening every day. Analysts predict over 75% of mid-large enterprises will migrate a workload to the cloud by 2021 – but how can you make sure your workload is successful? There are not just facto...
March 2020 - Professional Services and the Media Industry
In today's ever-shifting market, we recognize that you need to be constantly adapting, and Akamai provides a way to enhance your customers' experiences through our unique expertise, helping you unlock the value of Akamai's products and services. Professional Services' primary mission is to drive...