Weak Password Vulnerability in Internet Behavior Management System of DeepTrust Technology Co.

Functions of DeepTrust Internet behavior management products are user authentication and management, application control, traffic control, behavioral auditing, etc. Combined with the behavioral awareness platform BA, it provides behavioral logs with big data analysis capabilities to effectively...

Shanghai Yijue Network Technology Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2021-16460)

The business scope of Shanghai Yijue Network Technology Co., Ltd. includes technical development, technology transfer, technical consultation, technical services in the field of network technology, computer technology, information technology, computer network engineering and so on. Shanghai Yijue...

Weak Password Vulnerability in Integration Gateway MIG of DeepTrust Technology Co.

MIG integrated gateway is a set of VPN, security control, routing and switching in one, a device to meet the diversified needs of small and medium-sized branches. A weak password vulnerability exists in the MIG all-in-one gateway of DeepTrust, which can be exploited by an attacker to obtain...

Unauthorized Access Vulnerability in Tenda Routers of Shenzhen Jixiang Tenda Technology Co.

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tenda Technology Co., Ltd Tenda router has an unauthorized access vulnerability that can be exploited by attackers t...

Denial of Service Vulnerability in Tenda AC9 (CNVD-2021-17400)

AC9 is a 1200M 11AC wireless router with Gigabit Ethernet port launched by Shenzhen Jixiang Tengda Technology Co. in 2016. A denial of service vulnerability exists in the Tenda AC9, which can be exploited by an attacker to cause a denial of service attack...

SQL Injection Vulnerability in the Monitoring System of PV Power Station of Jiangsu Goodway Power Supply Technology Co.

Jiangsu Goodway Power Supply Technology Co., Ltd. is a new energy high-tech enterprise. A SQL injection vulnerability exists in the monitoring system of the photovoltaic power plant of Jiangsu Goodway Power Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information fr...

SQL Injection Vulnerability in Ar***.asp of Website Building System of Guangzhou Hande Network Technology Co.

HANDS network originated from ten years ago, the studio is committed to providing users with high-quality website construction solutions, business covering PC station, mobile station, to provide high-quality customized and special templates station building services. Ltd. website building system...

Weak Password Vulnerability in Xinhua's H3C Intelligent Management Center

The scope of business of Xinhua San Technology Co., Ltd. includes: technology development, technical services, technical consulting, transfer of achievements, production, sales: electronic products, software, data communication equipment, broadband access equipment, network security equipment,...

Weak Password Vulnerability in Internet Control Gateway of Beijing Netcom Technology Co.

Ltd. is a leading provider of network application management equipment in China, focusing on the research and analysis of the most cutting-edge trends in the field of network application management, providing users with advanced network application management technology, products and solutions,...

SQL Injection Vulnerability in the Website Building System of East Technology Limited (CNVD-2021-17409)

Oriental Technology Limited is a Hong Kong based web design and mobile application company. A SQL injection vulnerability exists in the website builder system of East Technology Limited, which can be exploited by attackers to obtain sensitive information from the database...

Weak Password Vulnerability in eVision Camera

Located in Shenzhen, Guangdong, China, E-Vision Technology is a company that mainly deals with digital cameras. A weak password vulnerability exists in EaseUS cameras, which can be exploited by an attacker to remotely connect to and control the camera...

IBM Security Verify Information Queue Session Fixation Vulnerability

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. A session fixation vulnerability exists in IBM Security Verify Information Queue. The vulnerability stems from incorre...

Command Execution Vulnerability in IG902H, an Edge Computing Gateway from ImagingHub

Beijing Yinghantong Network Technology Co., Ltd. is mainly engaged in technology development; technology promotion; technology transfer; technology consulting; technology service; computer technology training not for national enrollment; technology import and export; import and export of goods;...

IBM Security Verify Information Queue Hardcoded Credentials Vulnerability

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. A hard-coded credentials vulnerability exists in IBM Security Verify Information Queue. An attacker could exploit the...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - October 2020

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, and 8 that are used by Maximo Asset Management, Maximo Asset Management Essentials, Maximo Asset Management for Energy Optimization, Maximo Asset Management Essentials, Maximo Industry Solutions including...

Binary Vulnerability in VisualField VF***.exe Component at Zhejiang ZDZ Information Technology Co.

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A binary vulnerability exists in the VisualField VF.exe component of Zhejiang ZDAC Information Technology Co. Ltd. that can be exploited by an attacker to cause a...

Command Execution Vulnerability in Douxin of Shenzhen Renxin Technology Co.

Douxin is a WeChat open framework developed by Shenzhen Renxin Technology Co. A command execution vulnerability exists in Shenzhen RenWant Technology Limited Douxin, which can be exploited by an attacker to gain control of a web server...

SQL injection vulnerability in the ca***.asp page of the website building system of Ningbo Yilong Computer Technology Co.

Ningbo YiLong Computer Technology Co., Ltd. is a design and build enterprise focusing on enterprise website platform, government school, home service and other industries. There is a SQL injection vulnerability in the ca.asp page of the website builder system of Ningbo Yilong Computer Technology ...

Command Execution Vulnerability in Douxin of Shenzhen Renxin Technology Co. Ltd (CNVD-2021-17273)

Douxin is a WeChat open framework developed by Shenzhen Renxin Technology Co. A command execution vulnerability exists in Shenzhen RenWant Technology Limited Douxin, which can be exploited by an attacker to gain control of a web server...

File Upload Vulnerability in VisualField SC***.exe Component at Zhejiang ZDZ Information Technology Co.

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A file upload vulnerability exists in the VisualField SC.exe component of Zhejiang ZDAC Information Technology Co. Ltd, which can be exploited by an attacker to...