File Upload Vulnerability in the Frontend of NS-NGFW Next Generation Firewall of Beijing Netcom Technology Co.

Netcom Next Generation Firewall NGFW is a high-performance firewall that can comprehensively address application layer threats. A file upload vulnerability exists in the frontend of NS-NGFW, which can be exploited by attackers to gain control of the server...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager Oct 2020 CPU (CVE-2020-14782)

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager. These issues were disclosed as part of the IBM Java SDK updates in Oct 2020. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerabilit...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2020 and Jan 2021

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 8 that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM Java SDK updates in Oct 2020 and Jan 20...

Logic flaw vulnerability in the backend of the Ruyi Management System

Ruoyi management system is based on SpringBoot2.0 permissions management system, the core technology using SpringBoot, MyBatis, Shiro, Thymeleaf, Bootstrap, Vue and so on. If the backend of the management system has a logic flaw vulnerability. Attackers can use the vulnerability to overstep the...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2020 - Includes Oracle Oct 2020 CPU affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 ,version 8, that is used by IBM Tivoli Composite Application Manager for Transactions - Robotic Response Time. These issues were disclosed as part of the IBM Java SDK updates in August 2020. CVE-2020-14792 ...

Unauthorized access vulnerability in the background management system of Nanjing Jiuzhe Software Technology Co.

Nanjing Jiuzhe Software Technology Co., Ltd. is a mobile Internet customized software service provider. There is an unauthorized access vulnerability in the back-end management system of Nanjing Jiuzhe Software Technology Co...

SQL Injection Vulnerability in Runge Marking System of Chengdu Runge Unlimited Technology Co.

Chengdu R&G Unlimited Technology Co., Ltd. was founded on June 07, 2013, the company was mainly engaged in cross-platform 3D game engine research and development at the beginning of the company's business, after nearly a few years of technological precipitation of the company is currently engaged...

Security Bulletin: A security vulnerability has been identified in IBM SDK, Java Technology shipped with IBM Maximo Asset Management (CVE-2020-14781)

Summary CVE-2020-14781 was disclosed as part of the Oracle October 2020 Critical Patch Update. Java is used by Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas and Maximo for Utilitie...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2021 - Includes Oracle Jan 2021 CPU plus CVE-2020-27221

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, and 8 that are used by Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas and Maximo for...

Security Bulletin: A security vulnerability has been identified in IBM SDK, Java Technology shipped with IBM Maximo Asset Management (CVE-2020-2773)

Summary CVE-2020-2773 was disclosed as part of the Oracle April 2020 Critical Patch Update. Java is used by Maximo Asset Management, Maximo Asset Management Essentials, Maximo Asset Management for Energy Optimization, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo...

File Upload Vulnerability in Beijing Milwaukee Technology Company's Document Library System (Open Source Version)

Library system open source version is a document sharing, selling library CMS system . A file upload vulnerability exists in the open-source version of the library system of Beijing MirWeiye Technology Company, which can be exploited by an attacker to upload malicious files to obtain server contr...

Critics Blast Google’s Aim to Replace Browser Cookie with ‘FLoC’

This month Google begins a public test of a technology it says will eventually replace browser cookies in an effort to boost Chrome browser user privacy. However, critics say the switch is a half-measure and does not protect the web movements of Chrome users adequately. The Google solution–called...

Security Bulletin: A vulnerabbility exists in the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Manager (CVE-2020-14779, CVE-2020-14792, CVE-2020-14796, CVE-2020-14797, CVE-2020-14798).

Summary A vulnerability exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Manager IP Edition v4.2, which was disclosed in the Oracle October 2020 Critical Patch Update. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

Directory Traversal Vulnerability in MSS Streaming Media Server of Suzhou Kodak Technology Co.

Ltd. is a provider of video and security products and solutions, dedicated to video conferencing, video surveillance and video application solutions to help various government and enterprise customers to solve visual communication and management challenges. A directory traversal vulnerability...

Beijing Yunfan Internet Technology Co., Ltd. online learning test system has SQL injection vulnerability

Online learning test system is a multi-role online training test system, the system integrates user management, role management, departmental management, question bank management, test management, test question import and export, test management, online test, wrong training and other functions, t...

Henan Qingfeng Network Technology Co., Ltd. website building system has SQL injection vulnerabilities (CNVD-2021-21528)

Henan Qingfeng Network Technology Co., Ltd. is a high-tech company mainly operating in network services, engaged in website production, network marketing planning, software development, talent information services and other businesses. Henan Qingfeng Network Technology Co., Ltd. website building...

Security Bulletin: Multiple Security Vulnerabilities Have Been Identified In IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Access Manager for e-business

Summary IBM® SDK, Java™ Technology Edition is shipped with IBM Tivoli Access Manager for e-business. Information about multiple security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

National Surveillance Camera Rollout Roils Privacy Activists

While controversy over the potential overreach of neighborhood and law-enforcement video surveillance has focused mainly on Ring, an Atlanta-based startup has quietly rolled out its own network of smart surveillance cameras across the country that is again raising questions of privacy and the ire...

Command Execution Vulnerability in Knight CMS of Taiyuan Xunyi Technology Co. Ltd (CNVD-2021-19735)

Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS command execution vulnerabilities, attackers can use the vulnerability to obtain control of the web server...

SQL Injection Vulnerability in Research Management System of Beijing Eplag Technology Co.

Ltd. is a high-tech enterprise focusing on providing research informatization construction, research consulting, evaluation service and research transformation service for China's scientific research. A SQL injection vulnerability exists in the research management system of Beijing Eplag Technolo...