Weak Password Vulnerability in Bioventa V5000 (CNVD-2021-30891)

Based on hybrid biometrics technology, BioRadar V5000 integrates multiple sub-systems such as personnel, access control, time & attendance, consumption, ladder control, visitor, parking, patrol, video, ID card, information screen, face perception, channel and system management, providing an...

Weak Password Vulnerability in VAN AURORA V6000

Based on hybrid biometrics and computer vision technology, V6000 provides an integrated security management platform for pedestrian, vehicle and object inspection. A weak password vulnerability exists in Vantage V6000, which can be exploited by attackers to obtain sensitive information...

Vulnerability fixed in HP Integrated Lights Out Amplifier Pack

HP has fixed a vulnerability in Integrated Lights Out Amplifier Pack. An unauthenticated malicious person can exploit the exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the...

BlueVoyant optimizes customer security with Microsoft security services

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. What a year it has been. The rapid and unexpected transition to work from home is one of the biggest issues affecting companies of all sizes and industries in 2020. As companies...

CVE-2021-27887

Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...

SQL Injection Vulnerability in General Library Integrated Management System GLIS of Beijing Qingda Xinyang Technology Co.

General Library Integrated Management System GLIS is a completely B / S architecture system, object-oriented programming technology, more advanced technology, resources are easier to share and remote maintenance of the library under the open Web platform for integrated business management network...

CVE-2021-1441 Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability

A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local attacker to execute unsigned code at system boot time. This vulnerability is...

Unauthorized Access Vulnerability in GLIS, a General Library Integrated Management System (GLIMS) of Tsinghua University Xinyang

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

Catalog Traversal Vulnerability in GLIS, a General Library Integrated Management System of Beijing Qingda Xinyang Information Technology Co.

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

CVE-2021-1441: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local attacker to execute unsigned code at system boot time. This vulnerability is...

HPESBHF04103 rev.1 - HPE Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5) or Integrated Lights-Out 4 (iLO 4), Ripple20 Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Sensitive Information, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers -Prior to v2.18 - Please see the RESOLUTI...

HPESBHF04106 rev.1 - HPE Synergy Compute Modules with Integrated Lights-Out 5 (iLO 5) or Integrated Lights-Out 4 (iLO 4), Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers -Prior to v2.33 - Please see the RESOLUTION note HPE Integrated Lights-Out 4 iLO 4 -Prior to v2.77 - Please see the RESOLUTI...

HPESBHF04087 rev.1 - HPE Integrated Lights-Out 5 (iLO 5) for the Moonshot and Edgeline HPE ProLiant m750 Server Blade, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m750 Server Blade - Prior to iLO 5 v2.32 for Moonshot/Edgeline CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7202 |...

Changshu Qimao Network Information Technology Co., Ltd. website building system has SQL injection vulnerability

Ltd. is a professional engaged in Changshu website optimization, Changshu website construction, Changshu website production network promotion as one of the integrated Internet enterprises. Changshu Qimao Network Information Technology Co., Ltd. station building system there is a SQL injection...

WebAccess/HMI Designer suffers from a denial of service vulnerability (CNVD-2021-24691)

WebAccess/HMI Designer is an integrated human-machine interface development tool. A denial of service vulnerability exists in WebAccess/HMI Designer, which can be exploited by an attacker to cause a denial of service...

[SECURITY] Fedora 34 Update: gnome-initial-setup-40~rc-1.fc34

GNOME Initial Setup is an alternative to firstboot, providing a good setup experience to welcome you to your system, and walks you through configuring it. It is integrated with gdm...

Finalists announced in second annual Microsoft Security 20/20 awards

2020 was a transformational year. Seemingly overnight, COVID-19 reshaped our perspective on work, home life, and security. Setting up home offices and powering through online presentations in our pajama bottoms with cameos by pets and children, our industry rose to the challenge. All that...

Weak Password Vulnerability in Deep Integrity Gateway MIG

All-in-one gateway MIG can provide an integrated solution for SME customers, meet the diversified needs of large enterprise branches, and realize a full range of cost-effective solutions from flexible networking to business control. A weak password vulnerability exists in DeepTrust Integrated...

Fedora: Security Advisory for freeipa (FEDORA-2021-263244c071)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Cisco多款产品 安全漏洞

Cisco Cloud Services Router 1000V Series and so on are products of Cisco Corporation.Cisco Cloud Services Router 1000V Series is a 1000v series cloud services routing software.Cisco 1000 Series Integrated Services Routers ISRs are 1000 Series integrated multiservice routers.Cisco Integrated...