910 matches found
CVE-2023-35928 Nextcloud user scoped external storage can be used to gather credentials of other users
Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 19.0.0 until 19.0.13.9, 20.0.0 until 20.0.14.14, 21.0.0 until 21.0.9.12, 22.0.0 until...
CVE-2023-32320 Nextcloud Server's brute force protection allows someone to send more requests than intended
Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of them were executed even if the amount of faulty requests succeeded the limit by the time the response was sent to the client. This allowed someone to...
CVE-2023-32320
CVE-2023-32320 affects Nextcloud Server and Enterprise Server where, under parallel requests, the system could ignore the configured request limit and process faulty requests beyond the limit, enabling brute-force-like access to protected details. Affected versions include Nextcloud Server 25.0.7...
CVE-2023-24420
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...
CVE-2023-24420
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...
CVE-2023-24420: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin = 1.1.1 versions...
WordPress plugin: Administrative-side data storage for Contact Form – Cross-site scripting vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Chatwork code injection vulnerability
Chatwork is a business group chat application from Chatwork, Inc. A security vulnerability exists in Chatwork Desktop Application version 2.6.43 and earlier, which stems from a code injection vulnerability that allows a non-administrative user to store and access audio and image data for the...
CVE-2022-47376
The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although some site installations may choose to store personal data...
CVE-2023-32010: Sensitive Data Storage in Improperly Locked Memory
Windows Bus Filter Driver Elevation of Privilege Vulnerability...
Financial services company OneMain fined $4.25 million for security lapses
A series of security errors and mishaps has cost personal loan provider OneMain $4.25m in penalties, issued by the New York State department of financial services. The fines, coming at the end of a detailed investigation into how security practices at the company were determined to be below-par,...
CVE-2023-2665
Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0...
CVE-2023-2665
Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0...
PT-2023-3010 · Unknown · Conprosys Hmi System
Name of the Vulnerable Software and Affected Versions: CONPROSYS HMI System CHS versions prior to 3.5.3 Description: The issue concerns the storage of passwords in plaintext within the CONPROSYS HMI System. Specifically, account information for the database is saved in a local file without...
CVE-2023-24946: Sensitive Data Storage in Improperly Locked Memory
Windows Backup Service Elevation of Privilege Vulnerability...
CVE-2023-24899: Sensitive Data Storage in Improperly Locked Memory
Windows Graphics Component Elevation of Privilege Vulnerability...
CVE-2023-28283: Sensitive Data Storage in Improperly Locked Memory
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
CVE-2023-28278: Sensitive Data Storage in Improperly Locked Memory
Windows DNS Server Remote Code Execution Vulnerability...