CVE-2020-0537

Improper input validation in subsystem for IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access...

CVE-2020-8674

Out-of-bounds read in DHCPv6 subsystem in IntelR AMT and IntelRISM versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64 and 14.0.33 may allow an unauthenticated user to potentially enable information disclosure via network access...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU for WebSphere MQ Internet Pass-Thru - Jan 2020 - Includes Oracle Jan 2020 CPU minus CVE-2020-2585, CVE-2020-2654, and CVE-2020-2590

Summary WebSphere MQ Internet Pass-Thru has addressed the following vulnerability in IBM® Runtime Environment Java™ Version 7.0.10.50 and earlier. This issue was disclosed as part of the IBM Java SDK updates in January 2020. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java...

SQL Injection Vulnerability in Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion and so on. Ltd. has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Microsoft Joins Ban on Sale of Facial Recognition Tech to Police

Microsoft is joining Amazon and IBM when it comes to halting the sale of facial recognition technology to police departments. In a statement released Thursday by Microsoft President Brad Smith, he said the ban would stick until federal laws regulating the technology’s use were put in place. “We...

Security Bulletin: Multiple vulnerabilities have been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Business Service Manager April 2020 CPU

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Business Service Manager. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

Security Bulletin: A security vulnerability has been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Business Service Manager (CVE-2019-2949)

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Business Service Manager. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

Security Bulletin: A security vulnerability has been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Business Service Manager (CVE-2020-2654)

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Business Service Manager. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

allegianttechnology.com Cross Site Scripting vulnerability OBB-1194334

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

cleanroomtechnology.com Cross Site Scripting vulnerability OBB-1194124

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Podcast: Would You Use A Contact-Tracing Coronavirus App?

As a world afflicted by the coronavirus pandemic begins to re-open restaurants, retail stores and more, public-health officials remain concerned about the spread of the virus. Technology for contact-tracing apps, intended to help citizens trace whether they were exposed to someone who has tested...

SQL Injection Vulnerability in Nanjing Huaiyu Technology Online Marking System

Since 2002, Nanjing Huaiyu Technology Co., Ltd. has been committed to the use of computer hardware and software technology, opto-mechanical technology, pattern recognition and other technologies to develop, produce and sell for the field of education cursor readers and online marking and other...

Intel AMT and ISM Buffer Overflow Vulnerability

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A buffer...

Intel AMT and ISM Denial of Service Vulnerabilities

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A denial ...

Intel AMT and ISM Buffer Overflow Vulnerability (CNVD-2020-34707)

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A buffer...

Intel AMT Input Validation Error Vulnerability

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. Intel AMT has an input validation error vulnerability that originates from the program not properly validating input information. A remote attacker could explo...

Intel AMT and ISM Resource Management Error Vulnerability

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A resourc...

Intel AMT Information Disclosure Vulnerability

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. A security vulnerability exists in Intel AMT. A remote attacker could exploit the vulnerability to obtain information...

Intel AMT Input Validation Error Vulnerability (CNVD-2020-35708)

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. A security vulnerability exists in Intel AMT that originates from the program failing to properly validate user input. An attacker could exploit this...

Intel AMT and ISM Input Validation Error Vulnerability

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. An input...