McAfee Data Exchange Layer < 6.0.0.280 Privilege Escalation (SB10383)

The instance of McAfee Datat Exchange Layer Broker for Windows installed on the remote host is prior to 6.0.0.280 and therefore affected by a privilege escalation vulnerability. This vulnerability potentially allows local users to gain elevated privileges by exploiting weak directory controls in...

McAfee Data Exchange Layer Broker Installed (Windows)

Binary data mcafeedxlwininstalled.nbin...

GHSA-HWRX-WC75-MGH7 Spree allows remote attackers to obtain sensitive information

Spree 0.11.x before 0.11.2 and 0.30.x before 0.30.0 exchanges data using JavaScript Object Notation JSON without a mechanism for validating requests, which allows remote attackers to obtain sensitive information via vectors involving 1 admin/products.json, 2 admin/users.json, or 3...

May 10, 2022—KB5013952 (OS Build 14393.5125) - EXPIRED

None None...

Damon data exchange platform has a logic flaw vulnerability

Ltd. is a general-purpose, platform-based data integration product with independent intellectual property rights based on more than ten years of data processing experience. There is a logic flaw vulnerability in Damon Data Exchange Platform, which can be used by attackers to obtain sensitive...

The vulnerability of the php_wddx_pop_element function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the phpwddxpopelement function ext/wddx/wddx.c in the PHP programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

What is XMPP ❓ — Extensible Messaging & Presence Protocol

What is XMPP ❓ — Extensible Messaging & Presence Protocol Introduction In the early 2000s, when the idea of chat applications was shaping, XMPP was allowing developers to construct interactive chat applications. Since its genesis, this protocol has come a long way and is now included in the tech...

What is a Webhook and How Does it Work ❓

If you’re amazed how a web app can converse with other apps and pass information to streamline operations then you must know about webhook. More than a mere means of communication for online services, webhook make tons of things conceivable. It’s an interesting piece of technology used for enabli...

What is API Gateway ❓ How it works ❓

In general, a gateway is a passage that acts as a connector for 2 components to make them achieve certain functionality. API Gateway is not very different. However, it is a crucial topic to understand for many of us. Well, in this article, we have got you covered. Introduction to API Gateway: A...

Arbitrary File Download Vulnerability in Goldie SMS Middleware Web Edition

Kindi SMS middleware Web Edition is designed to build a hardware device-based SMS data exchange platform. An arbitrary file download vulnerability exists in Kindi SMS Middleware Web Edition, which can be exploited by an attacker to download arbitrary files...

CVE-2021-27481

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information...

Hardcoded credentials

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information...

CVE-2021-27481

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information...

CVE-2021-27481

The CVE-2021-27481 entry concerns ZOLL Defibrillator Dashboard, prior to version 2.2. Affected products use a hardcoded cryptographic key in the data exchange, creating potential unauthorized access to sensitive information. Connected advisories (ICSMA-21-161-01) explicitly flag hard-coded crypto...

Unisys Data Exchange Management Studio Cross-Site Scripting Vulnerability

Unisys Data Exchange Management Studio is a data exchange component from the American company Unisys. A cross-site scripting vulnerability exists in Unisys Data Exchange Management Studio version 5.0.34 and prior versions, which originates from input that is not cleared from HTML document fields,...

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

Input validation

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

CVE-2020-35542

CVE-2020-35542 affects Unisys Data Exchange Management Studio prior to or up to 5.0.34. The root cause is input not being sanitized/cleared from HTML document fields, enabling a cross-site scripting (XSS) vulnerability. Affected component: HTML input handling within the product’s UI; impact is us...

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...