Lucene search
+L

185 matches found

CNNVD
CNNVD
•added 2023/01/30 12:00 a.m.•20 views

Schneider Electric StruxureWare Data Center Expert security vulnerability

Schneider Electric StruxureWare Data Center Expert StruxureWare Data Center Management Expert is a monitoring software from the French company Schneider Electric Schneider Electric. Suitable for a variety of organizations to monitor their company-wide power, cooling, security, environment. A...

9.8CVSS8.3AI score0.00537EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/01/20 12:00 a.m.•11 views

CVE-2022-43959

Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators to discover an AD/LDAP administrative password by reading the source code of /bitrix/admin/ldapserveredit.php...

7.6AI score0.01013EPSS
SaveExploits1References3
Prion
Prion
•added 2023/01/03 10:15 p.m.•28 views

Design/Logic Flaw

Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not sufficiently protect credentials, which could allow an attacker to obtain user credentials and gain access to system data...

5CVSS7.5AI score0.00415EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2023/01/03 9:24 p.m.•42 views

CVE-2022-2967

Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not sufficiently protect credentials, which could allow an attacker to obtain user credentials and gain access to system data...

6.5CVSS7.8AI score0.00415EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/03 12:00 a.m.•19 views

PT-2023-12985 · Prosyst · Prosys Opc Ua Simulation Server

Name of the Vulnerable Software and Affected Versions: Prosys OPC UA Simulation Server versions prior to 5.3.0-64 UA Modbus Server versions 1.4.18-5 and prior Description: The issue concerns insufficient protection of credentials, potentially allowing an attacker to obtain user credentials and ga...

7.5CVSS7.5AI score0.00415EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/12/19 12:00 a.m.•18 views

Click Studios Passwordstate security vulnerability

Click Studios Passwordstate passwordstate is a password management software from the Click Studios team in Australia. The program provides users with the ability to save their passwords, record their accounts and passwords, and keep them safe. This program provides you with the ability to save yo...

6.5CVSS6.5AI score0.00911EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2022/11/11 4:15 p.m.•23 views

CVE-2022-26341

Insufficiently protected credentials in software in IntelR AMT SDK before version 16.0.4.1, IntelR EMA before version 1.7.1 and IntelR MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access...

8.8CVSS5.8AI score0.00475EPSS
SaveExploits0References1
CVE
CVE
•added 2022/11/11 3:47 p.m.•108 views

CVE-2022-26341

CVE-2022-26341 involves insufficiently protected credentials in Intel(R) AMT SDK prior to 16.0.4.1, Intel(R) EMA prior to 1.7.1, and Intel(R) MC prior to 2.3.2, potentially enabling an authenticated user to escalate privileges via network access. Affected components and versions are explicitly li...

8.8CVSS8.8AI score0.00475EPSS
SaveExploits0References1Affected Software3
CNNVD
CNNVD
•added 2022/11/11 12:00 a.m.•21 views

Multiple Intel products have security vulnerabilities

Intel Active Management Technology AMT and others are products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active management technology software.Intel Endpoint Management Assistant Intel EMA is a management software application for managing...

8.8CVSS8AI score0.00475EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/10/03 12:00 a.m.•28 views

Zyxel Cloud User Credentials Insufficient Protection

The vulnerability of the software for centralized device management in the Zyxel Cloud network is related to insufficient protection of user credentials. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to devices in the network...

10CVSS7.7AI score0.01307EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2022/08/18 9:15 p.m.•37 views

CVE-2022-30601

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access...

9.8CVSS0.00901EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/08/18 12:00 a.m.•23 views

PT-2022-20053 · Intel · Intel Datacenter Group Event Ios Application

Name of the Vulnerable Software and Affected Versions: IntelR Datacenter Group Event iOS application affected versions not specified Description: The issue concerns insufficiently protected credentials in the IntelR Datacenter Group Event iOS application, which may allow an unauthenticated user t...

7.5CVSS6.7AI score0.00758EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/08/10 12:00 a.m.•45 views

Intel Active Management Technology 安全漏洞

Intel Active Management Technology AMT is a suite of hardware-based remote active management technology software for computers from Intel Corporation. Intel Active Management Technology , Standard Manageability A security vulnerability exists in versions prior to August 9, 2022, which stems from...

9.8CVSS8.3AI score0.00901EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/08/10 12:00 a.m.•38 views

Intel Active Management Technology 安全漏洞

Intel Active Management Technology AMT is a suite of hardware-based remote active management technology software for computers from Intel Corporation. A security vulnerability exists in Intel Active Management Technology , Standard Manageability versions prior to August 9, 2022, which stems from...

5.5CVSS5.7AI score0.00194EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/08/10 12:00 a.m.•26 views

Intel Team Blue 安全漏洞

Intel Team Blue is a mobile application from Intel Corporation. Intel Team Blue has a security vulnerability that stems from insufficient credential protection, which can be exploited by an attacker to obtain sensitive information...

5.5CVSS5.7AI score0.00189EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2022/07/27 12:00 a.m.•46 views

Eyes of Network API Insufficient Credential Protection (CVE-2020-8657)

Binary data eonapicve-2020-8657.nbin...

9.8CVSS9.5AI score0.91874EPSS
SaveExploits4References2
CNNVD
CNNVD
•added 2022/05/19 12:00 a.m.•13 views

Mobotix Control Center 安全漏洞

Mobotix Control Center MxCC is a video management software from the German company Mobotix. It has all the features required for a professional and secure control center. A security vulnerability exists in Mobotix Control Center MxCC version 2.5.4.5 and prior versions, which stems from insufficie...

8.8CVSS7.8AI score0.0107EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/05/13 1:41 a.m.•32 views

Jenkins Build-Publisher plugin has Insufficiently Protected Credentials

Jenkins Build-Publisher plugin version 1.21 and earlier stores credentials to other Jenkins instances in the file hudson.plugins.buildpublisher.BuildPublisher.xml in the Jenkins master home directory. These credentials were stored unencrypted, allowing anyone with local file system access to acce...

7.8CVSS2.2AI score0.00375EPSS
SaveExploits0References4Affected Software1
Akamai Blog
Akamai Blog
•added 2022/03/24 1:00 p.m.•22 views

What's Driving Multi-Factor Authentication Adoption?

The need for businesses to deploy MFA for the protection of employee accounts has never been greater — according to the latest Verizon Data Breach report, nearly 80% of data breaches involve the use of stolen or compromised employee credentials and brute force logins...

7.1AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/12/14 12:00 a.m.•20 views

ModelSim Simulation 安全漏洞

Questa and ModelSim simulators are used worldwide to simulate, debug, and verify integrated circuit designs, etc. ModelSim Simulation and Questa Simulation do not protect sufficient credentials, and the RSA white-box implementation in the affected application does not adequately protect the...

6.5CVSS5.6AI score0.00582EPSS
SaveExploits0References4
Rows per page
Query Builder