Lucene search
+L

5851 matches found

BDU FSTEC
BDU FSTEC
•added 2023/10/05 12:00 a.m.•13 views

The vulnerability of the libxslt library in iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to gain unauthorized access to protected information.

The vulnerability of the libxslt library in iPadOS, tvOS, iOS, watchOS, and macOS relates to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

7.8CVSS6.8AI score0.01327EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
•added 2023/10/05 12:00 a.m.•15 views

The vulnerability of the microprogramming software of the SolarView Compact device, which is used for measuring solar energy, data display, and storage, stems from insufficient protection of registration data. This allows a intruder to disclose confidential information.

The vulnerability of the microprogramming software of the SolarView Compact device, which is used for measuring solar energy, data display, and storage, is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to disclose confidential...

5.5CVSS6.6AI score0.00329EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/05 12:00 a.m.•19 views

The vulnerability of the Maps component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Maps component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS is related to insufficient protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

3.3CVSS5.4AI score0.00317EPSS
SaveExploits0References8Affected Software5
IBM Security Bulletins
IBM Security Bulletins
•added 2023/10/04 12:58 p.m.•61 views

Security Bulletin: Vulnerabilities in Apache HttpComponents affect IBM Storage Protect Client, IBM Storage Protect for Virtual Environments, and IBM Storage Protect for Space Management (CVE-2012-6153, CVE-2014-3577, CVE-2020-13956)

Summary IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments Data Protection for VMware only, and IBM Storage Protect for Space Management can be affected by a vulnerability in Apache HttpComponents. The vulnerability can lead to spoofing attacks, bypass of...

5.8CVSS5.7AI score0.09189EPSS
SaveExploits2Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2023/10/04 12:49 p.m.•39 views

Security Bulletin: A vulnerability in the Administrative command line client affects IBM Storage Protect Client, IBM Storage Protect for Virtual Environments, and IBM Storage Protect for Space Management (CVE-2023-40368)

Summary IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments Data Protection for Hyper-V and Data Protection for VMware, and IBM Storage Protect for Space Management, can be affected by a vulnerability in the Administrative command line interface. The...

4.4CVSS4.2AI score0.00198EPSS
SaveExploits0Affected Software3
BDU FSTEC
BDU FSTEC
•added 2023/10/03 12:00 a.m.•15 views

The vulnerability of Zoom’s video conferencing software lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Zoom’s video conferencing software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

8.5CVSS7.4AI score0.0096EPSS
SaveExploits0References3Affected Software3
OSV
OSV
•added 2023/10/02 9:15 a.m.•14 views

CVE-2023-41800

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin = 1.4.2 versions...

4.8CVSS5.8AI score0.00369EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/09/29 12:00 a.m.•28 views

The vulnerability of the keyinstall component in MediaTek’s microprogramming software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the keyinstall component in MediaTek’s microprogramming software is related to insufficient protection of sensitive data due to incorrect validation of input data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

4.6CVSS5.5AI score0.00111EPSS
SaveExploits0References4
OSV
OSV
•added 2023/09/27 4:21 p.m.•17 views

CVE-2023-4129

Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext...

7.5CVSS5.8AI score0.00204EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/27 4:21 p.m.•34 views

CVE-2023-4129

Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext...

7.5CVSS6.3AI score0.00204EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/27 4:21 p.m.•30 views

Code injection

Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext...

5CVSS7.5AI score0.00204EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/27 3:44 p.m.•15 views

CVE-2023-4129

Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext...

5.9CVSS6.9AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/27 3:44 p.m.•76 views

CVE-2023-4129

CVE-2023-4129 affects Dell Data Protection Central, version 19.9, with an inadequate encryption strength issue. An unauthenticated network attacker could potentially recover plaintext from a block of ciphertext. The connected documents confirm the affected product/version and the underlying cause...

7.5CVSS7.4AI score0.00204EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/27 3:44 p.m.•41 views

CVE-2023-4129

Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext...

5.9CVSS7.7AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/27 12:01 p.m.•84 views

CVE-2023-44158

CVE-2023-44158 affects Acronis Cyber Protect 15 (Linux, Windows) prior to build 35979. The root cause is insufficient masking of the token field, leading to potential disclosure of sensitive information. The CVE entry indicates a high confidentiality impact but does not detail exploitability; exp...

7.5CVSS4AI score0.0079EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/27 12:00 a.m.•26 views

PT-2023-27884 · Dell · Dell Emc Data Protection Central

Name of the Vulnerable Software and Affected Versions: Dell Data Protection Central version 19.9 Description: The issue is related to inadequate encryption strength, allowing an unauthenticated network attacker to potentially recover plaintext from a block of ciphertext. This could be exploited b...

7.5CVSS7.4AI score0.00204EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/27 12:00 a.m.•4 views

CVE-2023-4129: Inadequate Encryption Strength

Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext...

7.5CVSS7.3AI score0.00204EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/27 12:00 a.m.•22 views

Dell Data Protection Central 加密问题漏洞

Dell Data Protection Central is a suite of data protection solutions from Dell USA. The product provides single sign-on, dashboards, and system monitoring. A vulnerability exists in Dell Data Protection Central version 19.9 due to an encryption issue that stems from insufficient encryption...

7.5CVSS6.7AI score0.00204EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2023/09/26 11:50 a.m.•98 views

Essential Guide to Cybersecurity Compliance

SOC 2, ISO, HIPAA, Cyber Essentials – all the security frameworks and certifications today are an acronym soup that can make even a compliance expert's head spin. If you're embarking on your compliance journey, read on to discover the differences between standards, which is best for your business...

6.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/09/26 12:00 a.m.•16 views

PT-2023-8483 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue is related to a lack of protection for service data in the printing component of the macOS operating system. This could allow an attacker to disclose protected information. An app may be able ...

5.5CVSS4.5AI score0.00211EPSS
SaveExploits0References8
Rows per page
Query Builder