PT-2025-2644 · Ibm · Ibm Security Verify Access Appliance +1

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance and Container versions 10.0.0 through 10.0.8 Description: The issue involves the transmission of sensitive or security-critical data in cleartext in a communication channel that can be detected by...

Active Exploitation: New Aquabot Variant Phones Home

...

The vulnerability of the Splunk Enterprise platform for operational analysis, related to the transmission of data in an open manner, allows a perpetrator to disclose protected information.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

The developers of Rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the official package registry with cryptocurrency mining malware. Following the...

The vulnerability of the Webservice API Endpoint component of the SAP Commerce Cloud platform allows a hacker to disclose protected information.

The vulnerability of the Webservice API Endpoint component of the SAP Commerce Cloud platform is related to the transmission of data in an open manner. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series, related to the transmission of data in an open manner, allows attackers to disclose protected information.

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

CVE-2024-11407 Denial of Service through Data corruption in gRPC-C++

There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPCARGTCPTXZEROCOPYENABLED can experience data corruption issues. The data sent by the application may be corrupted before transmission over the network...

iperf3: possible denial of service

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection...

IBM QRadar SIEM 安全漏洞

IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

The vulnerability of Ivanti Workspace Control’s software for controlling user access to applications and data, related to the transmission of data in an open manner, allows a hacker to obtain the user’s operating system credentials.

The vulnerability of the software for controlling user access to applications and data in Ivanti Workspace Control is related to the transfer of data in an open manner. Exploiting this vulnerability could allow a hacker to obtain the user’s operating system credentials...

The vulnerability of IBM Cognos Dashboards on Cloud Pak for Data software in managing business processes lies in the transfer of critical information in open text format, allowing attackers to disclose protected information.

The vulnerability of IBM Cognos Dashboards on Cloud Pak for Data, related to the transmission of critical information in open text format. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

PT-2024-10287 · Unknown · File Entity

Name of the Vulnerable Software and Affected Versions: File Entity versions 7.X- before 7.X-2.39 Description: The issue allows for the insertion of sensitive information into sent data, enabling forceful browsing. This can lead to the disclosure of protected information. The estimated number of...

PT-2024-41066 · Мир Кт-51 · Мир Кт-51

Name of the Vulnerable Software and Affected Versions: МИР КТ-51 affected versions not specified Description: The issue is related to information disclosure during data transmission. It may allow a remote attacker to elevate their privileges. Recommendations: At the moment, there is no informatio...

PT-2024-41074 · Ооо 'Нпо Мир' · Контроллер Мир Кт-51 +3

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to the implementation of the HTTP protocol in software products, which involves the transmission of data in an open format. This could allow a remote attacker to disclos...

PT-2024-41068 · Мир Кт-51 +1 · Мир Кт-51 +1

Name of the Vulnerable Software and Affected Versions: МИР КТ-51 and МИР контроллеры affected versions not specified Description: The issue is related to the implementation of the Telnet protocol in the МИР КТ-51 controller and the МИР controller configurator, which involves the transmission of...

CVE-2024-31200

A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext when an administrative session is open in the browser...

PT-2024-23844 · Plug&Track +1 · Sensor Net Connect V2 +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows an attacker with physical access to the machine to retrieve the password in cleartext when an administrative session is open in the browser. This is due to the insertion o...

DEBIAN-CVE-2024-41026

In the Linux kernel, the following vulnerability has been resolved: mmc: davincimmc: Prevent transmitted data size from exceeding sgm's length No check is done on the size of the data to be transmiited. This causes a kernel panic when this size exceeds the sgmiter's length. Limit the number of...

CVE-2024-41026

CVE-2024-41026 is a Linux kernel issue in the davinci_mmc driver where the transmitted data size could exceed sg_miter length, causing a kernel panic. The vulnerability arises from lack of validation on the data size to be transmitted; the fix limits the number of transmitted bytes to sg_mmiter-&...

PT-2024-29206 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the davinci mmc component. The issue arises from the lack of a check on the size of the data to be transmitted,...