IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2025-06806)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.7, which stems...

CVE-2024-24256

SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hrposition directory...

CVE-2024-24256: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hrposition directory...

CVE-2024-24256

The Yonyou space-time enterprise information integration platform (v.9.0 and earlier) is vulnerable to a SQL Injection flaw. An attacker can exploit the gwbhAIM parameter in the saveMove.jsp file within the hr_position directory to obtain sensitive information. As a remediation, it is recommended...

IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2023-11689)

IBM InfoSphere Information Server is an enterprise-class information integration platform. It helps customers understand complex information in heterogeneous systems and generate consistent, complete and trustworthy information through cleansing and transformation, and finally deliver trustworthy...

CVE-2021-44162 Chain Sea Information Integration Co., Ltd ai chatbot system - Path Traversal

Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication...

Command Execution Vulnerability in HG6145D at Wuhan Fiberhome Information Integration Technology Co.

HG6145D is a Gigabit Passive Fiber Optic Access User Unit GPON ONU of Fiberhome Communication Technology Co. A command execution vulnerability exists in the HG6145D of Wuhan Fiberhome Information Integration Technology Co. that can be exploited by an attacker to gain control of the server...

New Cyber Threat Center May Face Challenges

In the wake of news-making attacks on Sony Pictures, Home Depot and many others, the federal government is establishing a new information integration center to focus on cyber threats. The center will analyze intelligence contributed by several agencies, along with the private sector, a model that...