On February 26, Spring officially released a vulnerability notice in Spring Cloud Config. Yiming Xiang security researchers from NSFOCUS discovered a path traversal vulnerability (CVE-2020-5405) in the spring-cloud-config-server component. Attackers can use this vulnerability...
Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle acquired WebLogic Server when it purchased BEA Systems in 2008. In the Oracle Critical Patch Update Advisory – January...
Let’s Encrypt, a free certificate project initiated by the Internet Security Research Group issued an urgent reminder a few days ago. At the end of February, the project team found that there was a...
According to the XDA Developer Forum, Google will release an Android security update this month to fix high-risk vulnerabilities in Android devices based on the MediaTek chip solution. Google was aware of a high-risk...
Wi-Fi chips manufactured by Cypress and Broadcom exist serious security vulnerabilities (CVE-2019-15126), making billions of devices around the world very vulnerable to hackers, allowing attackers to decrypt the airborne transmissions around him and take...
Recently, VMware officially released VMSA-2020-0003 security updates. One of them was a critical vulnerability with CVE number CVE-2020-3943. “vRealize Operations for Horizon Adapter uses a JMX RMI service which is not securely configured. VMware...
Apache Tomcat is an open-source implementation of the Java Servlet, JavaServer Pages, Java Expression Language, and WebSocket technologies. Tomcat provides a “pure Java” HTTP web server environment in which Java code can run. Recently,...
Recently, Microsoft fixed a critical security vulnerability on Microsoft SQL Server Reporting Services (CVE-2020-0618) in the February Patch Tuesday event. “A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it...
Radware network security researchers warned that about 12,000 cloud automation servers worldwide could be exploited for launching the denial of service (DoS) Attacks, DDoS attacks can reach a magnification of 100 times, and the...
Intel has warned that there are multiple serious vulnerabilities in Security Engine products, and urge users to use the existing fix as soon as possible. It is understood that the Intel Converged Security and...
Earlier, Microsoft issued a security bulletin that revealed a zero-day vulnerability in Internet Explorer (CVE-2020-0674) reported by Google Project Zero and the 360 Security Group. The zero-day vulnerability was exploited by hackers before the...
Recently, Django officially released a security notice that announced a potential SQL injection vulnerability (CVE-2020-7471) that was exploited via StringAgg (delimiter). An attacker can pass the constructor delimiter to the django.contrib.postgres.aggregates.StringAgg aggregate function to...
Adobe officially released the February product security update. This update includes 5 security bulletins for 42 security vulnerabilities in Framemaker, Experiment Manager, Adobe Digital Editions, Flash, Acrobat, and Reader. Details are as follows: The...
On February 10, 2020, Apache Dubbo officially released the CVE-2019-17564 vulnerability notice, and the vulnerability level is important. Apache Dubbo is a high-performance, lightweight, java based RPC framework. Dubbo offers three key functionalities, which...
On February 11, 2019, Microsoft released the February security update. In February, Microsoft fixed up to 99 vulnerabilities, covering Windows operating system, IE / Edge browser, ChakraCore, SQL Server, Exchange Server, office and office...
Google has now launched this month’s routine security updates for Android. Of course, as you know most devices cannot install these critical security updates in a timely manner. After Google released the update, researchers...
