CVE-2021-0257

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

Realtek rtl8723de code issue vulnerability

Realtek rtl8723de is an interface controller from Realtek China. It is 802.11bgn 2.4G monolithic, integrated wireless LAN and network PCIe interface controller with integrated Bluetooth 5.0 USB interface controller. rtl8723de BLE Stack version 4.1 and prior versions have a code issue vulnerabilit...

Corel Parallels Desktop 安全漏洞

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in the IDE virtual appliance in Parallels Desktop version 15.1.5-47309. The vulnerability stems from not properly validating the length of user-supplied data before copying it to a...

Corel Parallels Desktop 缓冲区错误漏洞

Parallels Desktop is a virtual machine software that runs on Mac computers. An information disclosure vulnerability exists in the IDE virtual appliance in Parallels Desktop version 15.1.5-47309. The vulnerability stems from a lack of proper validation of user-supplied data. A local attacker could...

Simplify, then Add Lightness – Consolidating the Technology to Better Defend Ourselves

One of the biggest consequences of the rapidly evolving cybersecurity threat landscape is that defenses must constantly build bigger systems to defend themselves. This leads to both more complex systems and often less communication between them. More importantly, it can lead companies to invest i...

VulnCheck KEV: CVE-2017-12542

A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 iLO 4 version prior to 2.53 was found...

Remote Command Execution Vulnerability in the Console of Chianxin Tianrong Terminal Security Management System

Chianxin Tianrong Terminal Security Management System is an integrated terminal security product solution for government and enterprise organizations. The product integrates anti-virus, terminal security control, terminal access, terminal audit, peripheral control, EDR and other functions, is...

Weak Password Vulnerability in VAN AURORA V6000

Based on hybrid biometrics and computer vision technology, V6000 provides an integrated security management platform for pedestrian, vehicle and object inspection. A weak password vulnerability exists in Vantage V6000, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Bioventa V5000 (CNVD-2021-30891)

Based on hybrid biometrics technology, BioRadar V5000 integrates multiple sub-systems such as personnel, access control, time & attendance, consumption, ladder control, visitor, parking, patrol, video, ID card, information screen, face perception, channel and system management, providing an...

Vulnerability fixed in HP Integrated Lights Out Amplifier Pack

HP has fixed a vulnerability in Integrated Lights Out Amplifier Pack. An unauthenticated malicious person can exploit the exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the...

BlueVoyant optimizes customer security with Microsoft security services

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. What a year it has been. The rapid and unexpected transition to work from home is one of the biggest issues affecting companies of all sizes and industries in 2020. As companies...

CVE-2021-27887

Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...

SQL Injection Vulnerability in General Library Integrated Management System GLIS of Beijing Qingda Xinyang Technology Co.

General Library Integrated Management System GLIS is a completely B / S architecture system, object-oriented programming technology, more advanced technology, resources are easier to share and remote maintenance of the library under the open Web platform for integrated business management network...

CVE-2021-1441 Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability

A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local attacker to execute unsigned code at system boot time. This vulnerability is...

HPESBHF04087 rev.1 - HPE Integrated Lights-Out 5 (iLO 5) for the Moonshot and Edgeline HPE ProLiant m750 Server Blade, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m750 Server Blade - Prior to iLO 5 v2.32 for Moonshot/Edgeline CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7202 |...

Unauthorized Access Vulnerability in GLIS, a General Library Integrated Management System (GLIMS) of Tsinghua University Xinyang

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

Catalog Traversal Vulnerability in GLIS, a General Library Integrated Management System of Beijing Qingda Xinyang Information Technology Co.

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

WebAccess/HMI Designer suffers from a denial of service vulnerability (CNVD-2021-24691)

WebAccess/HMI Designer is an integrated human-machine interface development tool. A denial of service vulnerability exists in WebAccess/HMI Designer, which can be exploited by an attacker to cause a denial of service...

Changshu Qimao Network Information Technology Co., Ltd. website building system has SQL injection vulnerability

Ltd. is a professional engaged in Changshu website optimization, Changshu website construction, Changshu website production network promotion as one of the integrated Internet enterprises. Changshu Qimao Network Information Technology Co., Ltd. station building system there is a SQL injection...

[SECURITY] Fedora 34 Update: gnome-initial-setup-40~rc-1.fc34

GNOME Initial Setup is an alternative to firstboot, providing a good setup experience to welcome you to your system, and walks you through configuring it. It is integrated with gdm...