Memory Corruption Vulnerability in PM Designer V1.2.98.35 Processing PLF at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 Processing PLF of Pingtong Technology Co., Ltd. which can be exploited by attackers to cause the program to...

SQL injection vulnerability in the ne***.asp page of the website building system of Ruian Uber Technology Co. Ltd (CNVD-2021-15513)

Ltd. is a social mass to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM design...

Unauthorized Access Vulnerability in Eas7 Integrated Management Platform of Tiandiweiye Technology Co.

Tiandiweiye is the world's leading intelligent security solution provider. Based on artificial intelligence, big data, cloud computing, Internet of Things and other technologies, Tiandiweiye provides intelligent video products, system solutions and high-quality technical services for public...

Security Bulletin: A vulnerability exists in the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Configuration Manager (CVE-2020-2590).

Summary A vulnerability exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Configuration Manager IP Edition v6.4.2, which was disclosed in the Oracle January 2020 Critical Patch Update, but deferred until the release associated with the Oracle Oct 2020...

Afternoon Cyber Tea: Privacy, the pandemic, and protecting our cyber future

Much of our everyday life has moved online with the pandemic continuing to play a role in how we work and communicate with others. This migration has meant that security and privacy continue to remain top-of-mind for both security professionals and those who may not have given these cyber issues ...

Security Bulletin: IBM SDK Java Quarterly Oct 2020 Vulnerabilities Affect IBM Transformation Extender

Summary There are vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - Oct 2020 - Includes Oracle Oct 2020 CPU minus CVE-2020-14782 that affect IBM Transformation Extender. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Produc...

Jiangxi Jinger Technology Co., Ltd. knows that there is an XSS vulnerability in cloud document translation

Zhiyun Literature Translation is a dissertation translation tool. Jiangxi Jinger Technology Co. Zhiyun Literature Translation suffers from an XSS vulnerability, which can be exploited by attackers to obtain user cookie information...

Changzhou Zhenming Electronic Technology Internet of Things intelligent street light comprehensive management platform has logic flaws and loopholes

Changzhou Zhenming Electronic Science and Technology Co. Legal representative Yuan Chunjuan,The company's business scope includes: research and development of electronic products; technology development of new energy products; electronic products and components, metal materials, mechanical...

Memory Corruption Vulnerability in PM Designer V2.1.07.39 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V2.1.07.39, which can be exploited by attackers to cause a denial of service attack...

Memory Corruption Vulnerability in PM Designer V1.2.98.35 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...

Weak Password Vulnerability in Fusion Router of Shanghai Fusion Data Communication Technology Co.

Shanghai Fusion Data Communication Technology Co., Ltd. is a technologically innovative company that provides users with intelligent products and cloud services in the field of smart home. Shanghai Fusion Data Communication Technology Co., Ltd Fusion router has a weak password vulnerability, whic...

Unauthorized Access Vulnerability in ELYCN Recording and Broadcasting Platform of Zhejiang Dahua Technology Co.(CNVD-2021-15563)

DAHUA is a leading video-based intelligent IOT solution provider and operation service provider in the world. An unauthorized access vulnerability exists in the ELYCN recording and broadcasting platform of Zhejiang Dahua Technology Company Limited, which can be exploited by attackers to modify...

Memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co.(CNVD-2021-15521)

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...

SQL injection vulnerability in website builder system ne***.php page of Guangdong Jundu Technology Co.

Guangdong Jundu Technology Co., Ltd. is a comprehensive Internet value marketing services information technology network company specializing in custom development, network marketing, new media marketing, media advertising and other value-added services as a whole. There is a SQL injection...

Redfan iOffice Hospital Edition suffers from SQL Injection Vulnerability

hereinafter referred to as: Redfan Technology is a high-tech enterprise held by Guangzhou Shipbuilding International Company Limited, a subsidiary of China State Shipbuilding Corporation CSSC, one of the top ten military industrial groups. Red Sail iOffice Hospital Edition exists SQL injection...

Binary Vulnerability in PM Designer V2.1.07.39 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A binary vulnerability exists in PM Designer V2.1.07.39 of Pingtong Technology Co., Ltd. which can be exploited by attackers to cause a program crash...

Cxcms Has Logic Flaw Vulnerability

Changshu Changxiang Computer Information Technology Co., Ltd. was founded in July 2010, to provide enterprises with website construction, WeChat small program, public number, management software, Internet of Things, management software custom development services, with a number of software...

Security Bulletin: Multiple Vulnerabilities in IBM Sterling Connect:Direct Browser User Interface

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8.0.6.0 and Eclipse 9.4. IBM Sterling Connect:Direct Browser User Interface has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-11771 DESCRIPTION: Eclipse OpenJ9 could allow a local attacker...

Arbitrary File Read Vulnerability in GLIS, a General Library Integrated Management System of Beijing Qingda Xinyang Technology Co.

Beijing Qingda Xinyang Technology Co., Ltd. is a high-tech software enterprise registered in Zhongguancun, Beijing, the company is mainly engaged in book information industry application software, water conservancy informatization software, government informatization management system, network...

The vulnerability of the RDBMS sharding component of the Oracle Database Server management system allows a hacker to gain full control over the application.

The vulnerability of Oracle Database Server’s RDBMS sharding component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application using Oracle Net technology...