Command Execution Vulnerability in Remote Access of Changjie Tong Information Technology Co.

Remote Access is a universal, standard, secure and fast remote access product that allows users to access information systems deployed within the organization more securely and quickly via the Internet anytime, anywhere. A command execution vulnerability exists in Remote Pass of Smooth Informatio...

Intel® AMT and Intel® ISM Advisory

Summary: Potential security vulnerability in Intel® Active Management Technology AMT, and Intel® Standard Manageability ISM may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8758 Description:...

Memory Corruption Vulnerability in InoTouchPad by Huey Technology

InoTouchPad is an HMI programming software. A memory corruption vulnerability exists in Huichuan Technology InoTouchPad, which can be exploited by attackers to cause a program crash...

Unauthorized Access Vulnerability in Website Building System of Beijing North South World Technology Co.

hereinafter referred to as: North South Company was founded in 1994, is a new three board listed company stock code: 430066. It has been focusing on the foreign trade industry, providing enterprise users with "foreign trade ERP system", "foreign trade CRM system" and informationization services...

File Upload Vulnerability in E-Trend Intelligent eHR Management Platform

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. There is a file upload vulnerability in E-Trend's intelligent eHR management platform,...

SQL Injection Vulnerability in Huawang Cloud Conference Management Platform

Shenzhen Huawang Technology Co., Ltd. is a conference audio and video equipment manufacturers, video conferencing, video cameras, audio equipment research and development and production of national high-tech enterprises. There is a SQL injection vulnerability in Huawang Cloud Conference Managemen...

SQL Injection Vulnerability in the Website Building System of Shandong Chengtong Technology Co.

Ltd. is a company dedicated to industry enterprise informatization, cloud computing platform, human resources management system research and development and technical consulting services company Shandong Chengtong Technology Co., Ltd. website building system has a SQL injection vulnerability, whi...

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10552)

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...

SQL Injection Vulnerability in Chengdu Timeshift Technology Co.

Chengdu Times Huichuang Technology Co., Ltd, referred to as Times Huichuang, is an information technology service-oriented enterprise integrating Internet software research and development, website operation, e-commerce and IT services. A SQL injection vulnerability exists in the website builder...

Vulnerabilities fixed in Oracle Hyperion

Oracle has fixed vulnerabilities in the following Oracle Hyperion products: Hyperion Infrastructure Technology Hyperion Financial Reporting The vulnerabilities allow an unauthenticated malicious person with network access to the vulnerable system may be able to launch attacks execute attacks that...

Anhui Fishing Blue Education Software Technology Co., Ltd. station building system has information leakage vulnerability

Anhui Fishing Blue Education Software Technology Co., Ltd. is a science and technology enterprise specializing in secondary vocational education technology research and education informatization software research and development. There is an information leakage vulnerability in the website buildi...

SQL Injection Vulnerability in University Human Resource Management Platform of Nanjing Kuchi Information Technology Co.

Founded in 2009 with a registered capital of 10 million RMB, Nanjing Kuchi Information Technology Co., Ltd. is a software enterprise and high-tech enterprise focusing on human resource informatization management in colleges and universities in China. There is a SQL injection vulnerability in the...

Command Execution Vulnerability in the Seal Monitoring Management System of Beijing Huilang Times Technology Company Limited (CNVD-2021-10517)

Beijing Huilang Times Technology Co., Ltd. was founded in 2005, is a national high-tech enterprises and dual-soft certified enterprises, the products are a little bit of banknote detectors, seal monitoring and management equipment, automatic check printers, financial binding machines and other...

CVE-2021-2069

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside...

CVE-2021-2066

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside...

CVE-2021-2067

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside...

CVE-2021-2069

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside...

CVE-2021-2068

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside...

Design/Logic Flaw

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside...

CVE-2021-2067

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside...