SQL Injection Vulnerability in Networking Gateway of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. A SQL injection vulnerability exists in the networking gateway of Hangzhou Hikvision Digital Technology Co. Ltd, which can ...

NETGEAR DGND3700 Authentication Bypass Vulnerability (Dec 2020)

NETGEAR DGN3700 devices are prone to an authentication bypass vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

IBM Datacap Taskmaster Capture SQL Injection Vulnerability

IBM Datacap Taskmaster Capture is a complete solution for document and data capture from IBM USA. Data and document images can be scanned, categorized, identified, validated, verified and exported quickly, accurately and cost-effectively. IBM Datacap Taskmaster Capture suffers from a SQL injectio...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1997)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei Data Communication: Memory Leak Vulnerability in Huawei Products (huawei-sa-20210506-01-memleak)

There is a memory leak vulnerability in Huawei products. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Do CAPTCHAs work and what’s the alternative?

We know youre busy, so the answer is “No”. Users want less friction, and a good bot detection and mitigation solution will do the job MUCH better. The first lesson on the first day of UI school is that users want the path of least resistance. While the gamification of cybersecurity does have a...

File Upload Vulnerability in the Command and Dispatch Management Platform of Fujian Qualicom Communication Co.

Fujian Qualicom Communication Co., Ltd. is a solution provider and service operator focusing on professional communication. A file upload vulnerability exists in the Command and Dispatch Management Platform of Fujian Qualicom Communication Co. Ltd. that can be exploited by an attacker to upload a...

Philips Interoperability Solution XDS 安全漏洞

Philips Interoperability Solution XDS is a solution from Philips Europe. It provides an open standards-based platform that supports all types of medical images and clinical information. A security vulnerability exists in Philips Interoperability Solution XDS that originates. The vulnerability...

Philips Interoperability Solution XDS

1. EXECUTIVE SUMMARY CVSS v3 3.7 ATTENTION: Exploitable remotely Vendor: Philips Equipment: Interoperability Solution XDS Vulnerability: Clear Text Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read the LDAP...

SUSE: Security Advisory (SUSE-SU-2021:2106-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NTP < 4.2.8p13 NULL Pointer Dereference Vulnerability

A crafted malicious authenticated mode 6 ntpq packet from a permitted network address can trigger a NULL pointer dereference, crashing ntpd. Note that for this attack to work, the sending system must be on an address that the target SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions...

Huawei AnyOffice 代码问题漏洞

Huawei AnyOffice is a mobile office solution from Huawei, a Chinese company, and the Huawei AnyOffice product is vulnerable to a deserialization vulnerability that could be exploited by attackers to execute arbitrary code on the system...

Design/Logic Flaw

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In verions prior to 4.6, an attacker can perform a denial-of-service attack by triggering an infinite loop in the processing of IPv6 neighbor solicitation NS messages. This type of attack can effectively...

Infographic: How Do You Stop Bad Bots?

According to Imperva’s Bad Bot Report 2021, bad bot traffic has maintained its upwards trend, amounting to 25.6 percent of all traffic in 2020, an all-time high. Combined with good bot traffic, 40.8 percent of internet traffic in 2020 wasn’t human, as human traffic decreased by 5.7 percent to 59....

Fedora: Security Advisory for microcode_ctl (FEDORA-2021-598dbab9a9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQLite 3.8.5 - 3.29.0 DoS Vulnerability

SQLite is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

SAP Solution Manager 7.2 (ST 720) Open Redirection

Onapsis Security Advisory 2021-0005: SAP Solution Manager Open Redirect from Trace Analysis Impact on Business Under certain circumstances, an attacker might be able to steal a cookie from the application. It may impact the confidentiality of the service. Advisory Information - Public Release Dat...

Weak Password Vulnerability in EG2000P of Ruijie Networks Co.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the EG2000P of Ruijie Networks Co. An attacker can exploit this vulnerability to log into the device backend and obtain sensitive information...

Weak Password Vulnerability in NBR2000D of Riptide Networks Inc.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the NBR2000D of Ruijie Networks Co. An attacker can exploit the vulnerability to log in to the backend of the device and obtain sensitive information...

Weak Password Vulnerability in 1000C of Ruijie Networks Co.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the Ruijie Networks Co. 1000C. An attacker can exploit the vulnerability to log in to the backend of the device and obtain sensitive information...