SQL Injection Vulnerability in Beijing Jinpan Library Refined Management Platform

JINPAN Library Refined Management Platform consists of the management terminal of C/S architecture and the user terminals of C/S and B/S, covering four major functional modules, such as reading room management, training room management, readers' management, meeting check-in management and open...

Logic Flaw Vulnerability in Beijing Jinpan Library Refined Management Platform

Jinpan Refined Management Platform is a resource management system commonly used in universities and governmental and enterprise organizations nationwide, which consists of the management terminal of C/S architecture and the user terminals of C/S and B/S. It covers four major functional modules,...

Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform

Summary Security Bulletin: Multiple DB2 Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform Vulnerability Details CVEID: CVE-2020-4230 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 11.1 and 11.5 is vulnerable to an...

Zhengzhou Soter Information Technology Co., Ltd. digital campus management platform has a logic flaw vulnerability

Zhengzhou Sothe Information Technology Co., Ltd. is a software technology as the core, is committed to providing customers with software products, perfect technical support and software outsourcing services company. Zhengzhou Soter Information Technology Co., Ltd. digital campus management platfo...

Logic flaw vulnerability in human capital management platform of P&L Software Co.

P&T Software is a large-scale enterprise management informatization solutions and IT integrated service provider, mainly for petroleum, chemical, construction, real estate, electric power, minerals, equipment manufacturing, banking, insurance, government and other industries, widely engaged in...

SQL Injection Vulnerability in the Student Management Service Platform of Beijing Sanyituo Technology Co.

Beijing SANYITO Technology Co., Ltd. is an intelligent and intensive high-tech enterprise specializing in computer software research and development, application and service. There is a SQL injection vulnerability in the student management service platform of Beijing SanYiTuo Technology Co., Ltd,...

Important: Red Hat Security Advisory: Red Hat Decision Manager 7.7.0 Security Update

An update is now available for Red Hat Decision Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

Fortinet FortiManager Cross-Site Scripting Vulnerability (CNVD-2020-19918)

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

Siemens SiNVR 3 Weak Password Vulnerability

SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 has a weak password vulnerability in its implementation that can be exploited by a remote attacker to read and decrypt passwords...

Siemens SiNVR 3 Plain Text Save File Vulnerability

SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 stores login credentials in plain text in a log file. An information disclosure vulnerability exists in the implementation, which can be exploited by a...

Siemens SiNVR 3 Cross-Site Scripting Vulnerability

SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 has a reflected cross-site scripting vulnerability in its implementation, which can be exploited by remote attackers to obtain sensitive data or perform...

Zhejiang Yusi industry general video management platform file upload vulnerability

Video surveillance management platform is a set of industry general video management platform developed by Zhejiang YUVAD. A file upload vulnerability exists in Zhejiang YUVAD's industry general video management platform. An attacker can use the vulnerability to upload a webshell and gain server...

UVision Surveillance Management Platform Has Information Leakage Vulnerabilities

Transpacific is a global provider of solutions for public safety and intelligent transportation. An information leakage vulnerability exists in YUVAD's surveillance management platform, which can be exploited by attackers to gain access to sensitive system information...

Command Execution Vulnerability in Kingdee K3WISE Innovation Management Platform

Kingdee K3WISE Innovation Management Platform is a latest Kingdee K3WISE. A command execution vulnerability exists in Kingdee K3WISE Innovation Management Platform. An attacker can exploit the vulnerability to remotely execute commands and gain server privileges...

The vulnerability of the Automated Note Search Tool component of the SAP Basis system management platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Automated Note Search Tool component of the SAP Basis system management platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

SQL Injection Vulnerability in Xintian Technology Intelligent Water Management and Control Integration Platform System

Xintian Technology Co., Ltd. provides products and intelligent solutions to achieve energy savings. A SQL injection vulnerability exists in Xintian Technology's Intelligent Water Management and Control Integration Platform system, which can be exploited by attackers to obtain sensitive informatio...

Design/Logic Flaw

A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a malicious user obtain sensitive information. This interface listens on TCP port 15672 and 55672...

CVE-2016-2032

CVE-2016-2032 affects Aruba AirWave Management Platform 8.x before 8.2. The vulnerability exists in the RabbitMQ management interface (TCP ports 15672 and 55672) and could let an attacker obtain sensitive information. The public documentation describes the issue in the AirWave management web UI a...

Logic flaws in the integrated management platform of Shenzhen Kohao Information Technology Co.

Shenzhen Kohao Information Technology Co., Ltd. is a high-tech enterprise engaged in product development and operation of value-added telecommunication services, outsourcing software business and system integration. There is a logic flaw vulnerability in the integrated management platform of...

SolarWinds Orion Platform Cross-Site Scripting Vulnerability

SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...