SQL Injection Vulnerability in B2B2C Multi-User Mall System of Shanghai Shangchuang Network Technology Co.

Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. There is a SQL injection vulnerability in the B2B2C Multi-User Mall system of Shanghai Shangchuang Networks Technology Co...

Zhengzhou Rui Ma Technology Co., Ltd. website building system SQL injection vulnerability

Zhengzhou Rui Ma Technology specializes in providing Zhengzhou website construction, Zhengzhou website production, Zhengzhou website promotion, Zhengzhou website optimization, Zhengzhou seo optimization, Zhengzhou promotion software. Zhengzhou Rui Ma Technology Co., Ltd. website building system...

Security Bulletin: Vulnerability in IBM Java Runtime affects IBM Tivoli Netcool Configuration Manager (ITNCM) (CVE-2015-7575)

Summary There is a vulnerability in IBM® Runtime Environment Java™ Technology Edition, Version 6 Service Refresh 16 Fix Pack 5 and earlier releases that is used by ITNCM. This vulnerability, commonly referred to as “SLOTH”, was disclosed as part of the IBM Java SDK updates in January 2016...

Security Bulletin: Multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 that is used by IBM Tivoli Netcool Configuration Manager (ITNCM).

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 Service Refresh 16 Fix Pack 4 and subsequent releases, as used by ITNCM. These issues were disclosed as part of the IBM Java SDK updates in July 2015. This bulletin also addresses the Logjam...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Analytics

Summary There are multiple vulnerabilities in IBMRuntime Environment JavaVersion 7 used by IBM Spectrum LSF Analytics. IBM Spectrum LSF Analytics has addressed the applicable CVEs. Vulnerability Details Refer to the security bulletinss listed in the Remediation/Fixes section Affected Products and...

Intel Active Management Technology Multiple Vulnerabilities (INTEL-SA-00241)

Multiple potential security vulnerabilities in Intel Active Management Technology AMT may allow escalation of privilege, information disclosure, and/or denial of service DoS. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Intel Active Management Technology 12.0.x Multiple Vulnerabilities (INTEL-SA-00241)

Multiple vulnerabilities in Intel Active Management Technology AMT may allow escalation of privilege. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Policy Compliance Library Updates, December 2019

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...

Denial of Service Vulnerability in Distribution Terminal PDZ833 of Nanjing Softcore Technology Co.

Nanjing Softcore Technology Co., Ltd. is a company dedicated to the industrialization and promotion of real-time intelligence technology, advanced control and real-time optimization technology, and 3D visualization technology, and mainly provides related products and solutions based on the above...

Denial of Service Vulnerability in iPACS-5772 at Jiangsu Jinzhi Technology Co.

iPACS-5772 is a measurement and control device with remote control, telemetry, telecommunication functions, logic blocking function, programmed operation function, device self-test, time-alignment function, and the device is equipped with software time-alignment and hardware time-alignment...

SQL injection vulnerability in the pa***.php page of website building system of Hohhot Domain Technology Co.

Hohhot Web Domain Technology Limited Liability Company is a strategic e-commerce integration service organization. A SQL injection vulnerability exists in the pa.php page of the Hohhot Domain Technology Limited Liability Company's website builder system, which can be exploited by attackers to...

Denial-of-service vulnerability exists in PDZ833 of the distribution terminal of Nanjing Softcore Technology Co.

Nanjing Softcore Technology Co., Ltd. is a company dedicated to the industrialization and promotion of real-time intelligence technology, advanced control and real-time optimization technology, and 3D visualization technology, and mainly provides related products and solutions based on the above...

Logic flaws exist in the website building system of China Enterprise Dynamics Technology Co.

Based on PaaS+SaaS service model, CEC Technology Co., Ltd. integrates Portal Cloud, Business Cloud, Marketing Cloud, Management Cloud and Design Cloud into one-stop Internet intelligent operation services and industry solutions to meet the personalized and diversified Internet transformation need...

CVE-2019-11131

Logic issue in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-11100

Insufficient input validation in the subsystem for IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2019-11107

Insufficient input validation in the subsystem for IntelR AMT before version 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2019-11090

Cryptographic timing conditions in the subsystem for IntelR PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; IntelR TXE 3.1.70 and 4.0.20; IntelR SPS before versions SPSE504.01.04.305.0, SPSSoC-X04.00.04.108.0, SPSSoC-A04.00.04.191.0, SPSE304.01.04.086.0,...

Security Bulletin: Multiple vulnerabilities in the IBM SDK Java™ Technology for IBM i

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition for IBM i. These issues were disclosed as part of the IBM Java SDK updates in July 2014. Vulnerability Details CVEID: CVE-2014-3086 DESCRIPTION: A vulnerability in the IBM implementation of the Java Virtual Machine ma...

Security Bulletin:IBM Sterling Connect:Direct File Agent is affected by a vulnerability in the IBM Runtime Environment, Java™ Technology Edition (CVE-2013-1500)

Summary IBM Sterling Connect:Direct File Agent is shipped with IBM Runtime Environment, Java™ Technology Edition the “IBM RE”, that is based on an Oracle Java Runtime Environment JRE. Oracle has released the June 2013 critical patch updates CPU that contain security vulnerability fixes for the JR...

Denial of Service Vulnerability in NA400 of Nanda Aotuo Technology Jiangsu Co.

The NA400 is a programmable controller. A denial of service vulnerability exists in the NA400 of Nanda Aotuo Technology Jiangsu Co. An attacker can cause a denial of service to the device by continuously sending specific packets...