Weak Password Vulnerability in ShareWAF New Generation Active Defense WAF from Shanxi Wochdog Technology Co.

ShareWAF Next Generation Active Defense WAF is an innovative WAF product. ShareWAF New Generation Active Defense WAF from Shanxi Wochdog Technology Co., Ltd. suffers from a weak password vulnerability. An attacker can log into the system with this username and password to obtain sensitive...

File Upload Vulnerability in the Remote Processing System for Journal Manuscripts of Beijing Magtech Technology Development Co.

Journal Manuscript Remote Processing System is a platform for remote processing of journal manuscripts developed independently by Beijing Magtech. A file upload vulnerability exists in the Journal Manuscript Remote Processing System of Beijing Magtech Technology Development Company Limited, which...

Weak Password Vulnerability in Kirin Fortress of Beijing COSCO Kirin Technology Co.

Beijing COSCO KyLin Technology Co., Ltd. is a software development company mainly focusing on R&D. The main products of the company are COSCO KyLin Barrier Machine, KyLin SSL VPN, KyLin Dynamic Password System, KyLin Cloud Desktop and so on. A weak password vulnerability exists in COSCO KyLin's...

New cybersecurity legislation to amend the Health Information Technology for Economic and Clinical Health (HITECH) Act – an analysis of H.R. 7898

New legislation was passed by Congress and signed by the president on January 5, 2021 that amends the HITECH Act with an additional section titled: SEC. 13412. RECOGNITION OF SECURITY PRACTICES. The fundamental driver for amending HITECH is to ensure the secretary of Health and Human Services HHS...

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition, that is used by IBM Workload Scheduler.

Summary Java SE issues disclosed in the Oracle July 2020 Critical Patch Vulnerability Details CVEID: CVE-2020-14583 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause low confidentiality impact, low integrity...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Technology Development Co.

Ltd. is a one-card system and product provider, offering attendance system, ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development Co. An...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Technology Development Company Limited (CNVD-2021-04846)

Ltd. is a one-card system and product provider, offering attendance system, food ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development C...

Information Disclosure Vulnerability in Shentong's Large General Database

Tianjin Shenzhou General Data Technology Co., Ltd referred to as "Shenzhou General", belongs to China Aerospace Science and Technology Corporation CASC. It is a professional company engaged in the research and development of databases, big data solutions and data mining analysis products in China...

Intel® RST Advisory

Summary: A potential security vulnerability in the Intel® Rapid Storage Technology RST may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-14568 Description: Improper permissions in the executable...

Information Disclosure Vulnerability in Shentong Large General Database (CNVD-2021-05382)

Tianjin Shenzhou General Data Technology Co., Ltd referred to as "Shenzhou General", belongs to China Aerospace Science and Technology Corporation CASC. It is a professional company engaged in the research and development of databases, big data solutions and data mining analysis products in China...

Denial of Service Vulnerability in Tenda AC9, AC15 (CNVD-2021-03515)

Founded in 1999, Shenzhen Jixiang Tengda Technology Co., Ltd. is a professional supplier of network communication equipments and solutions, as well as a high-tech enterprise integrating R&D, production, supply, sales and service. A denial of service vulnerability exists in Tenda AC9, AC15, which...

Denial of Service Vulnerability in Tenda AC9, AC15 (CNVD-2021-03517)

Founded in 1999, Shenzhen Jixiang Tengda Technology Co., Ltd. is a professional supplier of network communication equipments and solutions, as well as a high-tech enterprise integrating R&D, production, supply, sales and service. A denial of service vulnerability exists in Tenda AC9, AC15, which...

Denial of Service Vulnerability in Tenda AC9, AC15 (CNVD-2021-03516)

Founded in 1999, Shenzhen Jixiang Tengda Technology Co., Ltd. is a professional supplier of network communication equipments and solutions, as well as a high-tech enterprise integrating R&D, production, supply, sales and service. A denial of service vulnerability exists in Tenda AC9, AC15, which...

Denial of service vulnerability in Tenda AC9, AC15 (CNVD-2021-05427)

Founded in 1999, Shenzhen Jixiang Tengda Technology Co., Ltd. is a professional supplier of network communication equipments and solutions, as well as a high-tech enterprise integrating R&D, production, supply, sales and service. A denial of service vulnerability exists in Tenda AC9, AC15, which...

SQL Injection Vulnerability in MX Marketing Platform of Yangquan Branch of Shanxi Longcai Technology Co. Ltd (CNVD-2021-03537)

Shanxi Longcai Technology Co., Ltd. was established on October 13, 2011, Yangquan Branch. Legal representative Fu Qiang, the company's scope of business includes: unified integration services; value-added telecommunications services; advertising business projects subject to approval by law,...

Denial of Service Vulnerability in LoveFast Router

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. There is a denial-of-service...

Denial of Service Vulnerability in H3C NX18 Plus

The scope of business of Xinhua San Technology Co., Ltd. includes: technology development, technology services, technology consulting, results transfer, production and sales: electronic products, etc. A denial of service vulnerability exists in H3C NX18 Plus, which can be exploited by attackers t...

Denial of Service Vulnerability in LoveFast Router (CNVD-2021-03424)

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. There is a denial-of-service...

Arbitrary File Download Vulnerability in iKuaiOS

The scope of business of Quanxun Convergence Network Technology Beijing Co., Ltd. includes: Internet information services; technology development, technical services, technical consulting, technology transfer, technology promotion and so on. iKuaiOS has an arbitrary file download vulnerability th...

IP-COM Deep Internet Behavior Management suffers from weak password vulnerability (CNVD-2021-03504)

Shenzhen HeWeiShun Network Technology Co., Ltd. business scope includes: network products, communication products, computer software and hardware, integrated circuit technology development, etc.. IP-COM Deep Internet Behavior Management has a weak password vulnerability that can be exploited by...