11861 matches found
Security Bulletin: Multiple vulnerabilities affects IBM Engineering Requirements Management DOORS Next
Summary There are multiple vulnerabilities that affects IBM Engineering Requirements Management DOORS Next, called before Rational DOORS Next Generation Vulnerability Details CVEID: CVE-2016-10328 DESCRIPTION: Freetype 2 is vulnerable to a heap-based buffer overflow, caused by an out-of-bounds...
Facial recognition: tech giants take a step back
Last week, a few major tech companies informed the public that they will not provide facial recognition software to law enforcement. These companies are concerned about the way in which their technology might be used. What happens when software that threatens our privacy falls into the hands of...
Memory Corruption Vulnerability in SATOOL dsh Project File of Shenzhen Xianzhong Technology Co.
Ltd. is a technology enterprise and double soft enterprise engaged in the research and development, production, sales and service of Industry 4.0 core products. There is a memory corruption vulnerability in the SATOOL dsh project file of Shenzhen Xianzhu Technology Co. An attacker can exploit the...
Shenzhen Police Wing Intelligent Technology Co., Ltd. website building system has arbitrary file download vulnerability
Shenzhen Police Wings Intelligent Technology Co., Ltd. is a leading enterprise in China's law enforcement recorder industry, focusing on providing law enforcement departments with law enforcement recorders as the core, including the Police Wings series of intelligent law enforcement equipment, th...
Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Operational Decision Manager (October 2019, January 2020 and April 2020 CPUs)
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 and 8 that is used by IBM Operational Decision Manager ODM. These issues were disclosed as part of the IBM Java SDK updates in October 2019, January 2020 and April 2020. Vulnerability Details CVEID:...
Remote Code Execution Vulnerability in UFIDA NC at UFIDA Network Technology Co.
UFIDA NC V6.5 is UFIDA Software's main Internet platform-based ERP system. A remote code execution vulnerability exists in UFIDA NC, which can be exploited by an attacker to gain server control privileges...
Intel Active Management Technology Information Disclosure Vulnerability (INTEL-SA-00295)
Intel Active Management Technology AMT is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
SQL Injection Vulnerability in YUNUCMS of Zhenjiang Yunyu Network Technology Co., Ltd (CNVD-2020-41337)
CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co.
JeeSite is an enterprise information technology development infrastructure platform. Jeesite by Jinan Zhuoyuan Software Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...
Arbitrary File Deletion Vulnerability in MetInfo of Changsha Mito Information Technology Co.
MetInfo is mainly used to build enterprise websites, using PHP+MySQL architecture, supporting SQLite database and so on. Changsha Mito Information Technology Co., Ltd MetInfo has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files from the websi...
Intel Active Management Technology DoS Vulnerability (INTEL-SA-00295)
Intel Active Management Technology AMT is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Aqua-Fi – New optical networks can deliver Internet underwater
By Deeba Ahmed Aqua-Fi is a technology based on lights and laser beams. This is a post from HackRead.com Read the original post: Aqua-Fi - New optical networks can deliver Internet underwater...
Memory Corruption Vulnerability in SamDraw of Shenzhen Apparent Control Technology Co.
Ltd. was founded in 2007, is a national high-tech enterprise, double soft enterprise specializing in industry 4.0 core product development, production, sales and service. Ltd. SamDraw has a memory corruption vulnerability that can be exploited by attackers to cause the program to crash...
File Upload Vulnerability in LJCMS of Beijing Liangjing Zhicheng Technology Co., Ltd (CNVD-2020-41832)
LJCMS is free and open source php enterprise website management system. Beijing LiangJingZhiCheng Technology Limited Liability Company LJCMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...
Command Execution Vulnerability in Hard Disk Recorder of Zhejiang YUV Technology Co.
Founded in 2011, Zhejiang YUVE Technology Co., Ltd. is a solution provider for public safety and intelligent transportation. A command execution vulnerability exists in the hard disk recorders of Zhejiang YUV Technology Co. Ltd, which can be exploited by an attacker to execute system commands to...
Intel Adds Anti-Malware Protection in Tiger Lake CPUs
Intel’s upcoming class of mobile CPUs, code named “Tiger Lake,” will feature a long anticipated security layer, called Control-flow Enforcement Technology CET, which aims to protect against common malware attacks. CET protects against attacks on processors’ control flow, which refers to the order...
CVE-2020-8674
Out-of-bounds read in DHCPv6 subsystem in IntelR AMT and IntelRISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable information disclosure via network access...
CVE-2020-0537
Improper input validation in subsystem for IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access...
CVE-2020-0535
Improper input validation in IntelR AMT versions before 11.8.76, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable information disclosure via network access...