522 matches found
CVE-2024-41290
FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component...
FlatPress security vulnerability
FlatPress is a Php-based blog builder without database support from the FlatPress community. A security vulnerability exists in FlatPress version v1.3.1, which stems from the use of an insecure method to store authentication data via the cookie component...
CVE-2024-41290: Cleartext Storage of Sensitive Information in a Cookie
FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component...
CVE-2024-41290
FlatPress CMS versions 1.3.1 through 1.3 are vulnerable to an information disclosure flaw due to the insecure storage of authentication data within the cookie component. Specifically, the software stores sensitive information, including usernames and hashed passwords , directly in client-side coo...
Yealink Meeting Server Auth Bypass
The vulnerability of the Yealink Meeting Server lies in the insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to gain access to user authentication credentials remotely...
Remote Desktop Licensing Service Code Execution
The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2024-6249 · Microsoft · Windows Remote Desktop Licensing Service +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory. This can allow a remote attacker t...
go-retryablehttp: url might write sensitive information to log file
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...
PSM Windows Resource Manager Privilege Escalation
The vulnerability of the PSM Windows Resource Manager service in the Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows kernel Privilege Escalation
The vulnerability of Windows operating system kernels is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Clipboard Virtual Channel Extension Code Execution
The vulnerability of the clipboard service between devices under the Windows operating system’s Virtual Channel Extension relies on the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability allows a remote attacker to execute...
go-retryablehttp: url might write sensitive information to log file
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...
urllib3: proxy-authorization request header is not stripped during cross-origin redirects
A flaw was found in urllib3, an HTTP client library for Python. In certain configurations, urllib3 does not treat the Proxy-Authorization HTTP header as one carrying authentication material. This issue results in not stripping the header on cross-origin redirects...
PT-2024-5715 · Microsoft · Windows Resource Manager Psm Service Extension +1
Name of the Vulnerable Software and Affected Versions: Windows Resource Manager PSM Service Extension affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory. This can allow an attacker t...
go-retryablehttp: url might write sensitive information to log file
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...
go-retryablehttp: url might write sensitive information to log file
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...
urllib3: proxy-authorization request header is not stripped during cross-origin redirects
A flaw was found in urllib3, an HTTP client library for Python. In certain configurations, urllib3 does not treat the Proxy-Authorization HTTP header as one carrying authentication material. This issue results in not stripping the header on cross-origin redirects...
go-retryablehttp: url might write sensitive information to log file
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...
go-retryablehttp: url might write sensitive information to log file
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information...
rpm-ostree Unauthenticated Access
The vulnerability of the rpm-ostree package in Red Hat Enterprise Linux and Fedora systems is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to authentication data...