365 matches found
The vulnerability of the RPKI validator OctoRPKI, which stems from the lack of data validation during data transmission, allows a violator to trigger a service failure.
The vulnerability of the RPKI validator OctoRPKI is related to the lack of verification of returned data during the generation of Route Origin Authorisations. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of implementations of data transmission specifications in industrial networks, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of implementations of data transmission specifications in industrial networks is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of implementations of data transmission specifications in industrial networks, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of implementations of data transmission specifications in industrial networks is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
CVE-2021-40012
Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2021-40012
Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...
Design/Logic Flaw
Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2021-40012
CVE-2021-40012 affects Huawei EMUI (notably EMUI 12.x) via the video framework where pointers are improperly used during data transmission, exposing confidentiality. Root cause: incorrect handling of pointers in the data transfer path within the video framework. Impact: information disclosure pot...
CVE-2021-40012
Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...
PT-2022-11134 · Huawei · Emui +2
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns the incorrect use of pointers during data transmission in the video framework, which may impact confidentiality upon successful exploitation. Recommendations: At the...
The vulnerability of the OAS Engine SecureAddUser function in the platform for data transmission between devices and applications allows a perpetrator to gain unauthorized access to the system.
The vulnerability of the OAS Engine SecureAddUser function on the platform for data transfer between devices and applications is related to the lack of authentication checks for this critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...
The vulnerability of the OAS Engine SecureAddSecurity function in the platform for data transmission between devices and applications allows a perpetrator to gain unauthorized access to the system.
The vulnerability of the OAS Engine SecureAddSecurity function in the platform for data transfer between devices and applications in the OAS Platform is related to the lack of authentication for this critical function. Exploiting this vulnerability could allow an attacker operating remotely to ga...
Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to unauthorized sensitive information access due to IBM Java (CVE-2021-35603)
Summary IBM Java is used by IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms in product configuration, management, and data transmission. IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms is impacted by an unauthorized sensitive information access...
Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to unauthorized data access due to IBM Java (CVE-2021-35550)
Summary IBM Java is used by IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms in product configuration, management, and data transmission. IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms is impacted by an unauthorized data access issue in IBM Java...
The vulnerability of the implementation of the ROC protocol for microprogrammed logic controllers FloBoss allows a intruder to gain unauthorized access to protected information.
The vulnerability of the ROC protocol implementation in FloBoss microprogrammed logic controllers is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
The vulnerabilities of embedded images of microprogrammed control systems for DeltaV M-series/S-series/P-series controllers, as well as the DeltaV/Ovation SIS emergency protection system, allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of embedded images of microprogrammed control systems for DeltaV M-series/S-series/P-series controllers, as well as of the emergency protection system DeltaV/Ovation SIS, is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a maliciou...
The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet-controllers from DirectLOGIC, related to the transmission of data in an open manner, allows a intruder to gain unauthorized access to the device.
The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet controllers from DirectLOGIC lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the device by receiving a password packet in ...
CVE-2022-21951
The CVE-2022-21951 issue affects SUSE Rancher (Rancher) where a Cleartext Transmission of Sensitive Information vulnerability allows an attacker on the network to read and modify network data. The root cause is missing encryption of data transmitted over the network when a cluster is created from...
Missing permission check in Jenkins Project Inheritance Plugin
Jenkins Project Inheritance Plugin 21.04.03 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml data to users without Job/Configure...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. Google Chrome suffers from a security vulnerability that arises from insufficient validation of user-supplied input during data transmission. A remote attacker can trick a victim into visiting a specially...
Cisco Adaptive Security Appliance和Firepower Threat Defense信息泄露漏洞
Cisco Firepower Threat Defense and Cisco Adaptive Security Appliances Software are both products of Cisco, Inc. Cisco Adaptive Security Appliances Software is a firewall and network security platform. The platform provides highly secure access to data and network resources, among other...