SQL Injection Vulnerability in Smart Multiservice Security Gateway Intelligent Management Platform (CNVD-2021-39314)

Beijing Byzoro Network Technology Co., Ltd. was established in 2005-04-06, the company's scope of business includes technology development, technology transfer, technical consulting, technical services; computer system services and so on. A SQL injection vulnerability exists in the Smart...

SQL Injection Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform (CNVD-2021-40164)

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. PatrolFlow Multi-service Security Gateway Intelligent Management Platform suffers from a SQL injection vulnerability, which c...

SQL Injection Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Limited (CNVD-2021-39833)

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. A SQL injection vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Networks Technology Co. Ltd, which ca...

Arbitrary File Download Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. An arbitrary file download vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform o...

SQL Injection Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A SQL injection vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform of Beijing...

File Upload Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A file upload vulnerability exists in PatrolFlow Multi-service Security Gateway Intelligent Management Platform. Attackers ca...

SQL Injection Vulnerability in Tianyue Transportation and Maintenance Security Gateway

Tianyue O&M Security Gateway Cloud Bastion is a compliance management system that controls and audits user O&M operations in business environments. A SQL injection vulnerability exists in Tianyue Operations and Maintenance Security Gateway. An attacker can exploit the vulnerability to obtain...

Weak Password Vulnerability in Netnifty LeadSec Netnifty Security Gateway

Beijing Netnifty Information Technology Co., Ltd. was renamed from Lenovo Netnifty Technology Beijing Co., Ltd. and its predecessor was the Information Security Division of Lenovo Group. Its main business covers network border security protection, application and data security protection, and...

Weak password vulnerability in Byzoro Networks Smart Multi-service Security Gateway Intelligent Management Platform

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A weak password vulnerability exists in the Smart Multi-service Security Gateway intelligent management platform of Byzoro...

Logic Flaw Vulnerability in Ampcom Deep Security Gateway

Ltd. is a provider of specialized core system products and security services for visual network security. A logic flaw vulnerability exists in the Amberton Deep Security Gateway, which can be exploited by an attacker to log in to the system and obtain sensitive information...

Unauthorized Access Vulnerability in Tianqing Web Application Security Gateway Web Page Tampering Prevention System

Tianqing Web Application Security Gateway hereinafter referred to as: Tianqing WAG anti-tampering is an application layer security product developed by Qishen based on Web security protection and application delivery. There is an unauthorized access vulnerability in Tianqing Web Application...

Weak Password Vulnerability in Tianqing Web Application Security Gateway Web Page Tampering Prevention System

Tianqing Web Application Security Gateway hereinafter referred to as: Tianqing WAG anti-tampering is an application layer security product developed by Qishen based on Web security protection and application delivery. There is a weak password vulnerability in Tianqing WAG anti-tamper system...

Weak Password Vulnerability in Lenovo.com Security Gateway

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and was formerly known as the Information Security Division of Lenovo Group. Its main business covers network border security protection, application and data security protection, and...

Command Execution Vulnerability in Netnifty Security Gateway

Beijing Netnifty Information Technology Co., Ltd. was renamed from Lenovo Netnifty Technology Beijing Co., Ltd. which was formerly known as Lenovo Group's Information Security Division. A command execution vulnerability exists in the Netnifty Security Gateway, which can be exploited by attackers ...

Weak password vulnerability in HUAWEI-Secoway-USG2210

HUAWEI-Secoway-USG2210 is a security gateway product of Huawei Technologies Co., Ltd. which supports command line, WEB, SNMP, TR069 and other configuration and management methods, which provide a variety of means of local configuration, remote maintenance, centralized management of the device, an...

CVE-2021-25692

Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3...

Design/Logic Flaw

Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3...

CVE-2021-25692

CVE-2021-25692 affects Teradici PCoIP Connection Manager and Security Gateway versions prior to 21.01.3, where sensitive smart card data is logged in default INFO logs. The root cause is logging of sensitive credential material in normal logs, enabling potential exposure on systems with log acces...

Check Point Security Gateway 安全漏洞

Check Point R80.30 Security Gateway is a security gateway product from Check Point Israel. A security vulnerability exists in Security Gateway versions prior to 21.01.3 that originates from logging sensitive smart card data into the default message log...

Weak Password Vulnerability in Tianyue Operations and Maintenance Security Gateway

Tianyue O&M Security Gateway, commonly known as Bastion Machine, is able to comprehensively track, control, record and playback the maintenance process of O&M personnel; it supports fine-grained configuration of O&M personnel's access privileges, blocking irregularities and overstepping of rights...