910 matches found
CVE-2023-28229: Sensitive Data Storage in Improperly Locked Memory
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...
CVE-2023-28220: Sensitive Data Storage in Improperly Locked Memory
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-28236: Sensitive Data Storage in Improperly Locked Memory
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2023-28219: Sensitive Data Storage in Improperly Locked Memory
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-28255: Sensitive Data Storage in Improperly Locked Memory
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2023-28256: Sensitive Data Storage in Improperly Locked Memory
Windows DNS Server Remote Code Execution Vulnerability...
Dell SupportAssist Unencrypted Storage
The vulnerability of performance optimization and security systems in Dell SupportAssist for Home PCs and Dell SupportAssist for Business PCs lies in the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected...
Active IQ Unified Manager XSS
The vulnerability of the Active IQ Unified Manager, a tool for managing system storage performance and status, exists due to the lack of protective measures taken to secure the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
ProfilePictureData is not stored, which will cause serious logic errors
Lines of code Vulnerability details Impact All data minted by the contract will not be stored, paralyzing the entire contract Proof of Concept code snippet： function mintaddress nftContract, uint256 nftID external uint256 tokenId = ++numMinted; if ERC721nftContract.ownerOfnftID != msg.sender reve...
CVE-2023-23393: Sensitive Data Storage in Improperly Locked Memory
Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability...
CVE-2023-23407: Sensitive Data Storage in Improperly Locked Memory
Windows Point-to-Point Protocol over Ethernet PPPoE Remote Code Execution Vulnerability...
CVE-2023-23414: Sensitive Data Storage in Improperly Locked Memory
Windows Point-to-Point Protocol over Ethernet PPPoE Remote Code Execution Vulnerability...
Admin side data storage for Contact Form 7 <= 1.1.1 - Unauthenticated Reflected XSS
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
Dell EMC Metro node’s
The vulnerability of the Dell EMC Metro node’s data storage management system is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
CVE-2022-34910
The CVE-2022-34910 entry concerns the A4N (Aremis 4 Nomad) Android app 1.5.0, where user passwords are stored in cleartext in the local data store. This root cause enables any attacker with device access to retrieve other users’ passwords, describing a local, data-leak risk rather than a remote e...
Cortex XDR Agent Command Injection
The vulnerability of the command-line interface of the network traffic analysis, network detection, and response tool Cortex XDR Agent for Windows operating systems is related to the storage of data in an open manner. Exploiting this vulnerability can allow attackers to gain unauthorized access t...
[SECURITY] Fedora 37 Update: syncthing-1.23.0-2.fc37
Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...
Cyber Attack on Ukrainian National Information Agency
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary On 17th January 2023, the Ukrainian National Information Agency "Ukrinform" suffered a partial cyber attack. The Government Computer Emergency Response Team of Ukraine CERT-UA initiated an investigation...
Devolutions Remote Desktop Manager security vulnerabilities
Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager versions 2022.3.29 to 2022.3.30, which stems from when it switches to offline mode, the forced...
