910 matches found
Jenkins Plain Credentials Plugin Unencrypted Storage
The vulnerability of the Jenkins Plain Credentials Plugin is related to the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Netgear DG834Gv5 Disclosure Protected Information
The vulnerability in the web-based management interface of Netgear DG834Gv5 integrated software lies in the unencrypted storage of critical information. Exploiting this vulnerability allows an attacker to disclose the protected data remotely...
ROS-20240704-08
A vulnerability in the curl program line utility is related to the storage of HSTS data in a file with a too long name, curl can delete the entire contents, causing subsequent requests using the file to be unaware of the HSTS status they should have used. file will be unaware of the status of the...
CVE-2024-6295 udn News App - Insecure Data Storage
udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...
CVE-2024-6295 udn News App - Insecure Data Storage
udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...
Windows Storage Services Privilege Escalation
The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...
PT-2024-11794 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.16.2-200.fc35.x86 64 Description: The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the hwmon component. This occurs when the clear caseopen function is called with the wrong device...
CVE-2024-25142 Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache
Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...
IdentiBot security vulnerabilities
IdentiBot is an open source Discord bot at MIT University written in Node.js that is used to verify an individual's affiliation with MIT, grant them a role in the Discord server, and store information about them in a database backend. IdentiBot has a security vulnerability that stems from members...
WordPress plugin Defender Security security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
HDF Group HDF5 security vulnerabilities
HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 Library version 1.14.3...
HDF5 security vulnerabilities
HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5. No information about...
HDF Group HDF5 security vulnerabilities
HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 Library version 1.14.3...
HDF5 security vulnerabilities
HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5. No information about...
CVE-2023-41818: Storage of Sensitive Data in a Mechanism without Access Control
An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs...
Windows Storage Services Privilege Escalation
The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
svc_supportassist Root Command Execution
The vulnerability of the svcsupportassist utility in the operating environment for managing and maintaining data storage in the Dell Unity Operating Environment exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this...
svc_dc utility Arbitrary Command Execution Root Privileges
The vulnerability of the svcdc utility in the operating environment for managing and maintaining data storage in the Dell Unity Operating Environment exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allo...
CVE-2024-32001 SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used
SpiceDB is a graph database purpose-built for storing and evaluating access control data. Use of a relation of the form: relation folder: folder | folderparent with an arrow such as folder-view can cause LookupSubjects to only return the subjects found under subjects for either folder or...