Security Bulletin: CVE-2020-14782 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary CVE-2020-14782 was disclosed as part of the Oracle October 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause no confidentiality...

Security Bulletin: CVE-2020-14781 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary CVE-2020-14781 was disclosed as part of the Oracle October 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-14781 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated attacker to obtain sensitive information...

SQL Injection Vulnerability in Flood Warning Broadcasting System of Xiamen Sihsin Communication Technology Co.

Xiamen Sihsin Communication Technology Co., Ltd. is a national high-tech enterprise, a leading enterprise of Fujian Province Science and Technology Innovation Small Giant, an Internet of Things IoT platform enterprise, an IoT technology expert, and an IoT communication equipment and solution...

Arbitrary File Read Vulnerability in the javaee Forum System of Beijing Weike Tongshuo Technology Co.

Beijing Weike Tongshuo Technology Co., Ltd. is a professional enterprise that provides Internet full integrated marketing services for large enterprises and organizations. There is an arbitrary file reading vulnerability in the javaee forum system of Beijing Microcomputer Technology Co. Ltd, whic...

SQL Injection Vulnerability in RMP Router Management Platform of Xiamen Sihsin Communication Technology Co.

Xiamen Sihsin Communication Technology Co., Ltd. is a national high-tech enterprise, a leading enterprise of Fujian Province Science and Technology Innovation Small Giant, an Internet of Things IoT platform enterprise, an IoT technology expert, and an IoT communication equipment and solution...

Anhui XED Software Technology Co., Ltd. XED OA exists arbitrary file download vulnerability

Anhui XED Software Technology Co., Ltd. was established on May 16, 2008. Legal representative Ru Caifeng, the company's scope of business includes: information technology in the field of software and mobile Internet application technology development, technical consulting, technical services, clo...

Logic Flaw Vulnerability in JieLink+ Mobile Charging Terminal

JieLink+ mobile charging terminal is a new generation of intelligent terminal operation platform solution launched by Shenzhen Jieshun Technology Industry Co. JieLink+ Mobile Toll Collection Terminal has a logic flaw vulnerability, which can be exploited by attackers to obtain sensitive informati...

SQL Injection Vulnerability in Intelligent Waste Sorting Management System

Tongling Golden Age Technology Limited Liability Company is a combination of the Internet of Things, information technology, waste classification and treatment of enterprises. An SQL injection vulnerability exists in the Intelligent Garbage Classification Management System, which can be exploited...

SQL Injection Vulnerability in Hanvon Face Attendance Management System (CNVD-2021-29069)

Founded in 1998, Hanvon Technology Co., Ltd. is a pioneer in researching, developing, applying and promoting multi-intelligent human-computer interaction technologies and products with the support of key projects such as the Eighth Five-Year Plan, the Ninth Five-Year Plan, the 863 Project, and th...

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition, that is used by IBM Workload Scheduler.

Summary Java SE issues disclosed in the Oracle July 2020 Critical Patch Vulnerability Details CVEID: CVE-2020-2754 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Scripting component could allow an unauthenticated attacker to cause a denial of service resulting in a lo...

SQL Injection Vulnerability in Equipment Management Platform of Shenzhen Chaohenghui Network Technology Co.

Shenzhen Chaohenghui Network Technology Co., Ltd. is a provider of user-side network and communication technology and equipment, headquartered in Bantian, Shenzhen, is a high-tech enterprise with a complete independent research and development, manufacturing and marketing system. Shenzhen...

BlueVoyant optimizes customer security with Microsoft security services

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. What a year it has been. The rapid and unexpected transition to work from home is one of the biggest issues affecting companies of all sizes and industries in 2020. As companies...

SQL Injection Vulnerability in VTS Management System of Shenzhen Yingzhijie Network Technology Co.

Shenzhen Yingzhijie Network Technology Co., Ltd. is a subsidiary of Intex Group, which is committed to providing valuable product services for enterprises. A SQL injection vulnerability exists in the VTS management system of Shenzhen Yingzhijie Network Technology Co. An attacker can utilize the...

SQL Injection Vulnerability in Sancai Journal Acquisition and Editing System of Xi'an Sancai Technology Industry Co.

Xi'an Sancai Technology Industry Co., Ltd. is a high-tech enterprise composed of a team of experts from the fields of scientific and technical journals, literature database management, and software design and engineering. SQL injection vulnerability exists in Sancai Journal Acquisition and Editin...

SQL Injection Vulnerability in Shenzhen Kewe Technology Co.

Zhihai Whale is a digital management system for medium-sized fresh food + superstores, convenience stores and other retailers. There is a SQL injection vulnerability in ZhihaiWhale of Shenzhen Kemin Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the...

Code Execution Vulnerability in CMS Content Management System of Chengdu JINWEI TECHNOLOGY Co.

Chengdu today network technology limited company scope of business: computer hardware and software development; computer hardware and software technology services, computer information technology consulting services; computer network engineering construction, etc.. Code execution vulnerability...

Weak password vulnerability in AC management platform of Guangzhou AnNet Communication Technology Co.

hereinafter referred to as AnNet focuses on the research and development, production, sales and service of network communication equipment based on IP technology, providing users with network security, routers, switches, firewalls, wireless AP coverage and other network products and business...

SQL Injection Vulnerability in the Website Building System of Bo.com Chasing New Technology (Beijing) Co.

Ltd. is a high-paying technology company dedicated to website construction. A SQL injection vulnerability exists in the website building system of Boonet Chase New Technology Beijing Co. An attacker can exploit the vulnerability to obtain sensitive information from the database...

IBM UrbanCode Deploy elevation of privilege vulnerability (CNVD-2021-26382)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

IBM UrbanCode Deploy Information Disclosure Vulnerability (CNVD-2021-24460)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...