IBM UrbanCode Deploy Information Disclosure Vulnerability (CNVD-2021-24460)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

SQL Injection Vulnerability in Business Control System of Taiyuan ECS Software Technology Co.

Ltd. is an Internet software development and system integration enterprise relying on Internet information and Internet of Things IoT technology to provide enterprises with complete smart factory solutions. There is a SQL injection vulnerability in the business control system of Taiyuan Easysoft...

MDR Vendor Must-Haves, Part 3: Ingestion of Other Technology Investments

This blog post is part of an ongoing series about evaluating Managed Detection and Response MDR providers. For more insights, check out our guide, “10 Things Your MDR Service Must Do.” By the time you’re ready to invest in a Managed Detection and Response MDR service, you’ve likely already invest...

Intel Sued Under Wiretapping Laws for Tracking User Activity on its Website

Intel is being sued under a Florida state wiretapping law for using software on its website to capture keystrokes and mouse movements of people that visit it. The case is one of many that private citizens have brought against companies to dispute their use of session-replay technology. A...

Weak password vulnerability in CPE-WiFi management platform of Shenzhen Sidetech Co.

Ltd. is a high-tech enterprise that provides a full line of products required for mainstream access network technology. There is a weak password vulnerability in the CPE-WiFi management platform of Shenzhen Xidit Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Information leakage vulnerability in Chengdu JINWEI TECHNOLOGY's website building system

Chengdu, Chengdu is a network technology limited company, the company is headquartered in Chengdu Wuhou District, Wuhou Avenue, Shunjiang section of No. 77, Building 2, 6 floor, Room 3. The main products of Chengdu JINWEI TECHNOLOGY EASY are website planning, web design, website construction and...

Security Bulletin: Vulnerability Detected in IBM SDK, Java Technology Edition, CVE-2020-2601

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition 8, that is used by Rational Application Developer®. The issue was disclosed as part of the IBM Java SDK updates in January 2020. Vulnerability Details CVEID: CVE-2020-2601 DESCRIPTION: An unspecified vulnerability in Oracle Jav...

Security Bulletin: IBM SDK, Java Technology Edition, Security Update Jul 2020

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition 8 that are used by Rational Application Developer®. These issues were disclosed as part of the IBM Java SDK updates in Jul 2020. Vulnerability Details CVEID: CVE-2020-14621 DESCRIPTION: An unspecified vulnerability in...

Security Bulletin: Security vulnerabilities have been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Access Manager for e-business

Summary IBM® SDK, Java™ Technology Edition is shipped with IBM Tivoli Access Manager for e-business Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in th...

Security Bulletin: Multiple vulnerabilities in affect IBM® SDK, Java™ Technology Edition may affect IBM Operations Analytics Predictive Insights

Summary Multiple vulnerabilities CVE-2020-14803, CVE-2020-27221 in IBM® SDK, Java™ Technology Edition affect IBM Operations Analytics Predictive Insights 1.3.6 and earlier and were disclosed as part of the IBM SDK, Java Technology Edition Quarterly CPU - Jan 2021. Vulnerability Details Refer to t...

Security Bulletin: A security vulnerability has been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Business Service Manager (CVE-2020-14781)

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Business Service Manager. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

Security Bulletin: A security vulnerability has been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Business Service Manager (CVE-2020-14782)

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Business Service Manager. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager (CVE-2020-14803, CVE-2020-27221)

Summary There are multiple vulnerabilities in IBM® SDK, Java™ Technology Edition Version 8 used by IBM Tivoli Business Service Manager. IBM Tivoli Business Service Manager has addressed the applicable CVEs. These issues were disclosed in the Oracle January 2021 Critical Patch Update, plus...

SQL Injection Vulnerability in Shanghai Yishang Network Technology Co.

Shanghai Yishang Network Technology Co., Ltd. is a company that provides all kinds of enterprises with enterprise website construction, website hosting and maintenance, webpage planning and design, graphic logo design, enterprise album design, cell phone website development, video presenter...

SQL Injection Vulnerability in General Library Integrated Management System GLIS of Beijing Qingda Xinyang Technology Co.

General Library Integrated Management System GLIS is a completely B / S architecture system, object-oriented programming technology, more advanced technology, resources are easier to share and remote maintenance of the library under the open Web platform for integrated business management network...

SQL injection vulnerability in rq***-d.php page of Renqiu Zhengzhong Network Technology Co.

Renqiu Zhengzhong Network Technology Co., Ltd. business scope includes: network technology services, software development and so on. Renqiu Zhengzhong Network Technology Co., Ltd. building system rq-d.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

SQL Injection Vulnerability in the Website Building System of Beijing Bolehoo Technology Co. Ltd (CNVD-2021-26012)

Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. There is a SQL injection vulnerability in the website builder system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in the Website Building System of Beijing Bolehoo Technology Co. Ltd (CNVD-2021-26011)

Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. There is a SQL injection vulnerability in the website builder system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to obtain...

Weak password vulnerability in IP-COM enterprise router management platform of Shenzhen HeWeiShun Network Technology Co.

IP-COM Enterprise Router is a high-performance router and in-depth Internet behavior management device of Shenzhen HeWeiShun Network Technology Co. A weak password vulnerability exists in the management platform of IP-COM Enterprise Router of Shenzhen HeWeiShun Network Technology Co. Ltd, which c...

Command Execution Vulnerability in FastAdmin of Shenzhen Extreme Creative Technology Co.

FastAdmin is an extremely fast backend development framework based on ThinkPHP5+Bootstrap. Shenzhen Extreme Creative Technology Co. FastAdmin has a command execution vulnerability that can be exploited by an attacker to gain control of the server...