Lucene search
+L

22299 matches found

Rapid7 Blog
Rapid7 Blog
added 2022/05/20 1:30 p.m.14 views

Are You in the 2.5% Who Meet This Cybersecurity Job Requirement?

Of course you’re special. So are we. But decades of research tells us humans believe they’re good multitaskers – and we are really, seriously not. It seems a measly 2.5% of us can multitask well. The rest of us are best when we focus on a single goal, allowing the left and right sides of our brai...

6.7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2022/05/19 6:10 p.m.12 views

suvarnabhumeyecenter.com Cross Site Scripting vulnerability OBB-2622139

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/05/19 2:15 p.m.6 views

CVE-2022-30018

Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...

8.8CVSS5.9AI score0.01054EPSS
SaveExploits1References2
NVD
NVD
added 2022/05/19 2:15 p.m.20 views

CVE-2022-30018

Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...

8.8CVSS0.01054EPSS
SaveExploits1References1
OSV
OSV
added 2022/05/19 2:15 p.m.11 views

CVE-2022-30018

Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...

8.8CVSS5.8AI score0.01054EPSS
SaveExploits1References1
Prion
Prion
added 2022/05/19 2:15 p.m.22 views

Design/Logic Flaw

Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...

6.5CVSS8.7AI score0.01054EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/05/19 1:13 p.m.123 views

CVE-2022-30018

Mobotix Control Center (MxCC) up to version 2.5.4.5 is affected by CVE-2022-30018 due to storing passwords in a recoverable format inside MxCC.ini, resulting in insufficient credential protection. This allows an attacker using the machine to obtain admin access to the software and access to recor...

8.8CVSS8.7AI score0.01054EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/19 1:13 p.m.33 views

CVE-2022-30018

Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...

9AI score0.01054EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/19 12:00 a.m.171 views

IBM Spectrum Protect Operations Center信息泄露漏洞(CNVD-2022-48933)

IBM Spectrum Protect Operations Center, an IBM company, provides visual control of the IBM Spectrum Protect environment. IBM Spectrum Protect Operations Center versions 8.1.12 and 8.1.13 are vulnerable to information disclosure vulnerability, which stems from the fact that account passwords may b...

5.5CVSS2.7AI score0.00157EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/05/19 12:00 a.m.8 views

PT-2022-19974 · Mobotix · Mobotix Control Center

Name of the Vulnerable Software and Affected Versions: Mobotix Control Center MxCC versions 2.5.4.5 and earlier Description: The issue concerns insufficiently protected credentials, where passwords are stored in a recoverable format via the MxCC.ini config file. This enables an attacker to gain...

8.8CVSS8.8AI score0.01054EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/05/19 12:00 a.m.7 views

Mobotix Control Center 安全漏洞

Mobotix Control Center MxCC is a video management software from the German company Mobotix. It has all the features required for a professional and secure control center. A security vulnerability exists in Mobotix Control Center MxCC version 2.5.4.5 and prior versions, which stems from insufficie...

8.8CVSS7.8AI score0.01054EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/18 3:27 p.m.9 views

USN-5430-1 gnome-control-center vulnerability

It was discovered that GNOME Settings incorrectly handled the remote desktop sharing configuration. When turning off desktop sharing, it may be turned on again after rebooting, contrary to expectations...

9.8CVSS7.3AI score0.00738EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/05/18 12:00 a.m.9 views

Gnome control center 安全特征问题漏洞

Gnome control center is a graphical user interface for the GNOME project. It is used to configure various aspects of Gnome. A security signature issue vulnerability exists in Gnome control center, which stems from a GNOME setting that triggers incorrect handling. An attacker could exploit this...

9.8CVSS8.2AI score0.00738EPSS
SaveExploits0References8
OSV
OSV
added 2022/05/17 4:15 p.m.10 views

CVE-2022-22484

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this...

5.5CVSS6.1AI score0.00157EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/17 4:15 p.m.29 views

CVE-2022-22484

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this...

5.5CVSS0.00157EPSS
SaveExploits0References2
Prion
Prion
added 2022/05/17 4:15 p.m.27 views

Command injection

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this...

2.1CVSS5.2AI score0.00157EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/05/17 4:00 p.m.36 views

CVE-2022-22484

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this...

5.1CVSS5.4AI score0.00157EPSS
SaveExploits0References2
CVE
CVE
added 2022/05/17 4:00 p.m.90 views

CVE-2022-22484

IBM Spectrum Protect Operations Center versions 8.1.12 and 8.1.13 are affected by a information-disclosure vulnerability where plain-text passwords may be stored in the browser’s application command history. A local attacker could access browser history to obtain other user accounts’ passwords. T...

5.5CVSS5.2AI score0.00157EPSS
SaveExploits0References2Affected Software1
Rockylinux
Rockylinux
added 2022/05/17 5:55 a.m.15 views

new packages: gnome-control-center

An update is available for gnome-session. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...

2AI score
SaveExploits0
OSV
OSV
added 2022/05/17 3:53 a.m.8 views

GHSA-3RWX-3VWH-MWXC Jenkins Vulnerable to Denial of Service (DoS)

Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service improper plug-in and tool installation via crafted update center data...

2.3CVSS7.2AI score0.01577EPSS
SaveExploits0References6
Rows per page
Query Builder