NTP-5D7FF32 Denial of Service Vulnerability in Shandong Fisherman Information Technology Co.

NTP-5D7FF32 is an NTP time server from Shandong Fisherman Information Technology Co. NTP-5D7FF32 of Shandong Fisherman Information Technology Co. Ltd. suffers from a denial-of-service vulnerability that can be exploited by an attacker to prevent the device from functioning properly...

Accelerator Program for Early-Stage Innovations in Water: An Akamai India CSR Flagship Initiative

Continuing in our commitment to sustainability, Akamai is excited to announce the launch of our accelerator program supporting innovators and building solutions to address India's water challenges. A concerted effort by the Akamai India leadership team, the accelerator program is being launched a...

Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud

Summary There are multiple security vulnerabilities that affect the IBM WebSphere Application Server in the IBM Cloud. There is a Swagger vulnerability that affects WebSphere Application Server Liberty. This affects the mpOpen-1.x and openAPI-3.x features. There is a cross-site scripting...

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products

Summary Multiple vulnerabilities in the Oracle Java SE and the Java SE Embedded impact the IBM SDK, Java Technology Edition. Vulnerability Details CVEID: CVE-2019-2602 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Libraries component could...

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products

Summary Multiple vulnerabilities in the Oracle Java SE and the Java SE Embedded impact the IBM SDK, Java Technology Edition. Vulnerability Details CVEID: CVE-2019-2981 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow an unauthenticated attacker to cau...

Authorities Eye Using Mobile Phone Tracking COVID-19's Spread

Authorities in the United States and Israel are eyeing ways to use mobile-phone and other location-based data to help control the spread of the new coronavirus COVID-19, raising serious privacy concerns about the practice of using and sharing people’s personal data during the time of a global...

Micro Focus Service Manager Information Disclosure Vulnerability (CNVD-2020-18400)

Micro Focus Service Manager is a suite of service desk software from Micro Focus UK. The software supports the deployment of a comprehensive IT service management ITSM system and standardizes management processes. A security vulnerability exists in Micro Focus Service manager. An attacker could...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM eDiscovery Analyzer

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by IBM eDiscovery Analyzer. These issues were disclosed as part of the IBM Java SDK updates in Jan 2020. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SD...

Hubei Tao code thousand dimensional information technology limited company gold micro cell phone mall system file upload vulnerability

Jinwei mobile mall system is suitable for micro-business customers with public number, imitating the page layout of the hand Tao, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory...

Hubei Tao code thousand dimensional information technology limited company gold micro cell phone mall system exists arbitrary file modification vulnerability

Jinwei mobile mall system is suitable for micro-business customers with public number, imitating the page layout of the hand Tao, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory...

Logic Flaw Vulnerability in LJCMSshop of Beijing Liang Jing Zhi Cheng Technology Co.

Liangjing Mall online shopping system is a set of multi-functional online store system that can fit different types of goods and is super flexible. A logic flaw vulnerability exists in LJCMSshop of Beijing Liangjing Zhicheng Technology Co., Ltd, which can be exploited by attackers to modify the...

File Upload Vulnerability in EyouCMS of Hainan Zanzan Network Technology Co. Ltd (CNVD-2020-23486)

Hainan Zanzan Network Technology Co., Ltd. station-building system EyouCms is based on the TP5.0 framework for the core development of free + open source enterprise content management system, focusing on enterprise station-building user needs, to provide a large number of templates in various...

Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Escalation of Privilege

Summary: There is an escalation of privilege vulnerability in Intel® Active Management Technology AMT, Intel® Standard Manageability ISM, and Intel® Small Business Technology versions firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow an unprivileged attacker to gain...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect the WebSphere Message Broker V8.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7.0.10.50 used by WebSphere Message Brokerr V8. These issues were disclosed as part of the IBM Java SDK updates in Oct 2019 Vulnerability Details CVEID: CVE-2019-2989 DESCRIPTION: An unspecified vulnerabilit...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect WebSphere Message Broker V8.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7.0.10.45 used by WebSphere Message Brokerr V8. These issues were disclosed as part of the IBM Java SDK updates in July 2019 Vulnerability Details CVEID: CVE-2019-2816 DESCRIPTION: An unspecified vulnerabili...

Memory Corruption Vulnerability in MagicWorks HMI V3.91 at Shenzhen Hexin Automation Technology Co.

Ltd. abbreviated as "Hexin Technology", founded in 2003, is a high-tech enterprise specializing in the research and development, production, sales and technical services of industrial automation products, and is a supplier of industrial automation solutions. MagicWorks HMI V3.91 has a memory...

Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS exists sql injection vulnerability

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS there is a sql injection vulnerability, attackers can use the vulnerability to obtain database sensitive informati...

QCMS Arbitrary File Read Vulnerability

QCMS is an open source content management system CMS for creating responsive websites from China's Velvet Ease Technology Corporation. A security vulnerability exists in the system/controller/backend/template.php file in the QCMS v3.0.1 version of VelvetEase Technology. An attacker can exploit th...

SQL Injection Vulnerability in Website Building System of Nanyang Jump Dragon Gate Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a brand website construction and marketing, micro letter website design and marketing, mobile design, technology development, Taobao store decoration, network marketing in one of the comprehensive network technology company. Nanyang leap dragon door scien...

ACLU Sues Over U.S. Airport Facial-Recognition Technology

The American Civil Liberties Union ACLU has filed suit the Department of Homeland Security DHS over its use of facial recognition technology in airports, decrying the government’s “extraordinarily dangerous path” to normalize facial surveillance as well as its secrecy in making specific details o...