File Upload Vulnerability in Everlab-Catalog Distributor Management Backend of Beijing Kubaza Information Technology Co.

Beijing Cobazaar Information Technology Co., Ltd. is a high-tech enterprise specializing in network software development and services. Beijing Cobazaar Information Technology Co., Ltd. has a file upload vulnerability in its Everlab-Catalog reseller management backend that can be exploited by an...

Logic flaw vulnerability in equipment access gateway of Zhejiang Dahua Corporation Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the device access gateway of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in NGFW of Next Generation Firewall of Beijing Netcom Technology Co.

Ltd. is a leading provider of network application management equipment in China, focusing on the research and analysis of the most cutting-edge trends in the field of network application management, providing users with advanced network application management technology, products and solutions,...

SQL Injection Vulnerability in NGFW of Next Generation Firewall of Beijing Netcom Technology Co. Ltd (CNVD-2021-34225)

Ltd. is a leading provider of network application management equipment in China, focusing on the research and analysis of the most cutting-edge trends in the field of network application management, providing users with advanced network application management technology, products and solutions,...

Arbitrary File Read Vulnerability in NS-NGFW Next Generation Firewall of Beijing Netcom Technology Co.

Ltd. is a leading provider of network application management equipment in China, focusing on the research and analysis of the most cutting-edge trends in the field of network application management, providing users with advanced network application management technology, products and solutions,...

Command Execution Vulnerability in the Firewall Gateway Management System of Shenzhen Hechen Communication Technology Co.

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

Arbitrary File Read Vulnerability in Device Access Gateway of Zhejiang Dahua Corporation Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file read vulnerability exists in the device access gateway of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

File Upload Vulnerability in School Training and Teaching Management System of Nanjing Suwen Software Technology Co.

Nanjing Suwen Software Technology Co., Ltd. was formerly known as the software studio established in 2001 in Gulou District, Nanjing, 2002, the studio began to involve in the performance management system, course selection management system, faculty management system development and design, in...

Logic Flaw Vulnerability in Firefighting Level 1 Platform of China Fire Cloud Technology Co.

Ltd. is a company that invests, builds and operates smart city security and emergency service projects based on Internet of Things, cloud computing and big data. The smart city security and emergency service projects cover the fields of emergency response, law and order, security supervision, fir...

File Upload Vulnerability in OfficeWeb365 of Xi'an Daxi Information Technology Co.

OfficeWeb365 focuses on Office document online preview and PDF document online preview cloud services, including Microsoft Word document online preview, Excel table online preview, Powerpoint presentation document online preview, WPS word processing, WPS forms, WPS presentations and Adobe PDF...

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2021-34249)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A SQL injection vulnerability exists in NC Cloud of UFIDA Network...

Denial of Service Vulnerability in UOS Operating System of Unisys Software Technology Co.

Unisys is a Chinese basic software company with the mission of "building China's operating system innovation ecosystem". A denial-of-service vulnerability exists in the UOS operating system of Unisys Software Technology Limited, which can be exploited by attackers to cause a denial of service...

Weak Password Vulnerability in Network Access Authentication Specialist of Sichuan Zhumai Technology Co.

Ltd. is a high-tech company engaged in software development, sales and service. Ltd. Network Access Authentication Specialist has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime may affect Tivoli Netcool Performance Manager for Wireless,Oracle January 2021 CPU

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 & 8 used by Tivoli Netcool Performance Manager for Wireless. Tivoli Netcool Performance Manager for Wireless has addressed the applicable CVEs.These issues were disclosed as part of the IBM Java SDK updates in...

The Account Takeover Threat: A By-the-Numbers Breakdown

Identity theft has come a long way in the age of technology. The more data is available online, the greater the threat. In this blog we will dive into the different characteristics and statistics of real world Account Takeover attacks as recorded and mitigated by Imperva’s Advanced Bot Protection...

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the DNS service in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SQL Injection Vulnerability in Budget Instant Audit System of Beijing Zhongke Shangxin Technology Co.

Ltd. is the pioneer of comprehensive budget informatization solution for domestic enterprises, creating enterprise financial management platform software and mobile reimbursement bill of lading. A SQL injection vulnerability exists in the Budget Instant Audit System of Beijing Zhongke Shangxin...

Weak Password Vulnerability in SG-6000-E2300 of Shanshi Netcom

SG-6000-E2300 is a firewall product of Shanshi Netcom Technology Beijing Co. A weak password vulnerability exists in the SG-6000-E2300, which can be exploited by attackers to obtain sensitive information...

CVE-2021-2242

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2021-2242

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...