554 matches found
CVE-2021-38121 Weak communication protocol identified in Advance Authentication client application
Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. This issue affects NetIQ Advance Authentication versions before 6.3.5.1...
CVE-2021-38121
NetIQ Advance Authentication is affected by a weakness in the TLS protocol version used in client–server communications when accessing a specific service. Affected versions are prior to 6.3.5.1. The root cause is described only as an insufficient or weak TLS version; detailed technical mechanics ...
CVE-2021-38121 Weak communication protocol identified in Advance Authentication client application
Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. This issue affects NetIQ Advance Authentication versions before 6.3.5.1...
CVE-2021-38122 Cross-Site Scripting (XSS) in Advance Authentication
A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This issue affects NetIQ Advance Authentication before 6.3.5.1...
CVE-2021-38122 Cross-Site Scripting (XSS) in Advance Authentication
A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This issue affects NetIQ Advance Authentication before 6.3.5.1...
CVE-2021-38122
NetIQ Advance Authentication is affected by a Cross-Site Scripting (XSS) vulnerability affecting versions prior to 6.3.5.1. The issue enables execution of arbitrary scripts via unfiltered user input, impacting server functionality and potentially exposing sensitive data. Affected component is the...
PT-2024-10881 · Netiq · Netiq Advance Authentication
Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: A vulnerability identified in storing and reusing information in Advance Authentication can lead to leakage of sensitive data to unauthorized users. Recommendations: Update t...
PT-2024-10883 · Netiq · Netiq Advance Authentication
Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 NetIQ Advance Authentication versions up to 6.3 SP5 Patch 1 Description: A vulnerability identified in NetIQ Advance Authentication leaks sensitive server information. Recommendations: Fo...
PT-2024-10989 · Netiq · Netiq Advance Authentication
Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: The issue is related to an insufficient or weak TLS protocol version used in the Advance authentication client-server communication when a specific service is accessed betwee...
PT-2024-10988 · Netiq · Netiq Advance Authentication
Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: A vulnerability identified in Advance Authentication allows bash command injection in administrative controlled functionality of backup due to improper handling in provided...
PT-2024-10990 · Netiq · Netiq Advance Authentication
Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: A Cross-Site Scripting issue has been identified in NetIQ Advance Authentication, impacting server functionality and potentially disclosing sensitive information...
PT-2024-10884 · Netiq · Netiq Advance Authentication
Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: A vulnerability identified in NetIQ Advance Authentication does not enforce account lockout when a brute force attack is performed on API-based login. This issue may lead to...
UBUNTU-CVE-2022-48841
In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in iceupdatevsitxringstats It is possible to do NULL pointer dereference in routine that updates Tx ring stats. Currently only stats and bytes are updated when ring pointer is valid, but later on...
CVE-2024-2300
HP Advance Mobile Applications for iOS and Android are potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices...
CVE-2024-2300 HP Advance Mobile Application – Potential Information Disclosure
HP Advance Mobile Applications for iOS and Android are potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices...
CVE-2024-2300
Technical details are not publicly available in the provided documents. Monitor for updates from HP and security advisories to obtain affected versions, vulnerable components, and remediation steps.
CVE-2024-2300 HP Advance Mobile Application – Potential Information Disclosure
HP Advance Mobile Applications for iOS and Android are potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices...
HP Advance Mobile Applications Security Vulnerability
HP Advance Mobile Applications is a series of mobile applications from Hewlett-Packard HP USA designed to enhance the printing and document management experience. A security vulnerability exists in HP Advance Mobile Applications that stems from a possible information disclosure issue...
Advance Auto Parts customer data posted for sale
A cybercriminal using the handle Sp1d3r is offering to sell 3 TB of data taken from Advance Auto Parts, Inc. Advance Auto Parts is a US automotive aftermarket parts provider that serves both professional installers and do it yourself customers. Allegedly the customer data includes: Names Email...