CVE-2021-2242

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2021-2242

CVE-2021-2242 affects Oracle Fusion Middleware’s Oracle Outside In Technology (Outside In Filters). The affected product is Outside In Technology within Fusion Middleware, with version 8.5.5 affected. The vulnerability is exploitable with network access via HTTP by an unauthenticated attacker and...

CVE-2021-2240

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2021-2240

CVE-2021-2240 affects Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware. Affected: Outside In Filters in Oracle Outside In Technology, version 8.5.5. Vector: network (HTTP) with no authentication. Impact: unauthorized update/insert/delete and read access to Oracle ...

Security Bulletin: A vulnerability in IBM® Runtime Environments Java™ Technology Edition Versions affects IBM® Db2®. (January 2021 CPU)

Summary There are multiple vulnerabilities in IBM® Runtime Environments Java™ Technology Edition, Versions 7.0.10.55 and earlier, 7.1.4.55 and earlier, 8.0.6.0 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM® SDKs Java™ Technology Edition updates in Jan 2021...

Dongguan Kaipu Software Technology Co., Ltd. Kaipu management system has SQL injection vulnerabilities

Dongguan Kaipu Software Technology Co., Ltd. operates in the fields of human resources management system, one-card project, network monitoring and computer hardware and software system integration. Dongguan Kaipu Software Technology Co., Ltd. Kaipu management system SQL injection vulnerability,...

Command Execution Vulnerability in NS-NGFW Next Generation Firewall of Beijing Netcom Technology Co.

NS-NGFW is a high-performance application layer firewall that can comprehensively deal with network threats. A command execution vulnerability exists in NS-NGFW, which can be exploited by an attacker to gain server control privileges...

Unauthorized Access Vulnerability in H3C Smart O&M Platforms

Xinhua San Technology Co., Ltd. is committed to becoming a trusted partner for customers' business innovation and digital transformation. An unauthorized access vulnerability exists in H3C Smart Operation and Maintenance Platform, which can be exploited by attackers to obtain sensitive informatio...

Command Execution Vulnerability in the Media Server of Zhejiang YUV Technology Co.

Founded in 2011, Zhejiang Yusi Technology Co., Ltd Yusi is a global solution provider for public safety and intelligent transportation. A command execution vulnerability exists in the media server of Zhejiang YUV Technology Co. Ltd, which can be exploited by an attacker to execute system commands...

Arbitrary File Deletion Vulnerability in Youyou Firewall of Shenzhen Hechen Communication Technology Co.

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

Binary Vulnerability in Haiwell PLC OPC Server

Founded in 2005, Xiamen Haiwei Technology Co., Ltd. is a national high-tech enterprise integrating independent research and development, production, sales and service. A binary vulnerability exists in the Haiwell PLC OPC server, which can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in the Multimedia Information Distribution System of Shenzhen Touchtone Technology Co.

Shenzhen Touchtone Technology Co., Ltd. is a professional manufacturer and supplier of touch control all-in-one machine, touch query machine, LCD advertising machine. There is a SQL injection vulnerability in the multimedia information distribution system of Shenzhen Touchtone Technology Co...

Directory Traversal Vulnerability in KTO's Fully Intelligent Parking Video Charging System (CNVD-2021-33198)

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A directory traversal vulnerability exists in KOTO's fully intelligent parking video charging system. An attacker can exploit thi...

Arbitrary file reading vulnerability exists in Saida Technology's CloudVision video conferencing terminal

Anhui Saida Technology Co., Ltd. focuses on intelligent cloud video industry, based on the network of communication carriers, using a new generation of information technology to create a "cloud video application engine", focusing on big data application platforms, intelligent terminal product...

Command Execution Vulnerability in Flying Fishstar Enterprise Intelligent Wireless Internet Behavior Management System

Chengdu Flying Fish Star Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network usage through innovative technologies, and cooperating with users to create an intelligent and...

Note to Self: Create Non-Exhaustive List of Competitors

What was the best news you heard so far this month? Mine was learning that KrebsOnSecurity is listed as a restricted competitor by Gartner Inc. NYSE:IT -- a $4 billion technology goliath whose analyst reports can move markets and shape the IT industry. Earlier this month, a reader pointed my...

Security Bulletin: IBM SDK Java Quarterly CPU Oct 2020 Vulnerabilities Affect IBM Transformation Extender

Summary There are vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - Oct 2020 - Includes Oracle Oct 2020 CPU plus one additional vulnerability that affect IBM Transformation Extender. Vulnerability Details CVEID: CVE-2020-14781 DESCRIPTION: An unspecified vulnerability in Java SE...

[eBook] Why Autonomous XDR Is Going to Replace NGAV/EDR

For most organizations today, endpoint protection is the primary security concern. This is not unreasonable – endpoints tend to be the weakest points in an environment – but it also misses the forest for the trees. As threat surfaces expand, security professionals are harder pressed to detect...

Industrial Control Device Vulnerability in NA400 PLC at Aptar Technology Co.

NA400 PLC is a high performance programmable controller from OPTOTECHNIK Co. A vulnerability exists in the NA400PLC of Aptar Technology Corporation for industrial control devices, which can be exploited by an attacker to modify a user's password...

Privilege Bypass Vulnerability in Flying Fish Star Enterprise Intelligent Internet Behavior Management System

Chengdu Flying Fish Star Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network usage through innovative technologies, and cooperating with users to create an intelligent and...