CVE-2022-27225

Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. It uses Keycloak for identity management services. During the sign-in process, Keycloak sets browser cookies that effectively provide remember-me functionality. For backwards compatibility with older Safar...

CVE-2022-27225

Gradle Enterprise before 2021.4.3 is affected by a session‑level vulnerability related to Keycloak cookies. During sign‑in, Keycloak sets cookies that effectively enable remember‑me functionality; for older Safari versions, a duplicate cookie is created without the Secure attribute. This allows t...

The vulnerability of the web interface of NETGEAR RAX43 integrated software routers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the web interface of NETGEAR RAX43 router software relates to the transmission of data in an open manner. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information through HTTP requests...

Baker Hughes Bently Nevada 3500 安全漏洞

The Baker Hughes Bently Nevada 3500 is a machinery and equipment monitoring and protection system from Baker Hughes USA. The Baker Hughes Bently Nevada 3500 has a security vulnerability that arises from the use of weak encryption algorithms to store and transmit sensitive data, which could be...

The vulnerability of the FTP server vsftpd, which stems from the lack of protection for transmitted data, allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the FTP server vsftpd is related to the lack of protection for the data being transmitted. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack...

CVE-2021-41835

CVE-2021-41835 affects Fresenius Kabi Agilia Link+ and related components in Agilia Connect Infusion System. The root issue is failure to enforce transport-layer encryption: data may traverse plaintext, with TLS offered on port 443 but no automatic redirect from unencrypted port 80 to 443. The vu...

GHSA-C8CC-HJ57-VM65 User passwords transmitted in plain text by Jenkins Active Directory Plugin

Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations...

CVE-2022-23105

Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations...

Code injection

Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations...

CVE-2022-23105

Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations...

The vulnerability of the SMB protocol implementation within the in-core CIFS/SMB3-server ksmbd server for Linux operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SMB protocol implementation within the in-core CIFS/SMB3 server ksmbd server for Linux operating systems is related to the transmission of data in an open manner when the SMB2GLOBALCAPENCRYPTION flag is used. Exploiting this vulnerability can allow a remote attacker to ga...

The vulnerability of the “Basic HTTP Authentication” method for the Ethernet web application of the WISE-4060 module allows a attacker to gain access to confidential information.

The vulnerability of the “Basic HTTP Authentication” method in the Ethernet web application of the WISE-4060 module involves the transmission of data in an open manner. Exploiting this vulnerability could allow a remote attacker to gain access to confidential information...

IBM QRadar Network Security Information Disclosure Vulnerability (CNVD-2022-15539)

IBM QRadar Network Security is a network security manager from IBM USA, Inc. used to provide better visibility and control over activities and users on the network, while using deep packet inspection, heuristics and behavior-based analysis to detect and prevent advanced threats.A security...

The vulnerability of the systeminformation library in the Node.js software platform allows a hacker to execute arbitrary code.

The vulnerability of the systeminformation library in the Node.js software platform is related to errors in transmitting data to the parameters of the si.inetLatency, si.inetChecksite, si.services, and si.processLoad services. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2021-40366

A vulnerability has been identified in Climatix POL909 AWB module All versions V11.42, Climatix POL909 AWM module All versions V11.34. The web server of affected devices transmits data without TLS encryption. This could allow an unauthenticated remote attacker in a man-in-the-middle position to...

Huawei Emui and Magic UI uninitialized variable vulnerability

Huawei Emui is a mobile operating system based on Android. magic Ui is a mobile operating system based on Android. Huawei Emui and Magic UI have security vulnerabilities that could be exploited by attackers to cause invalid data to be transmitted...

CVE-2021-22482

There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of invalid data...

CVE-2021-36996

There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of certain virtual information...

CVE-2021-22482

CVE-2021-22482 affects Huawei smartphones (EMUI/Magic UI). Root cause: uninitialized variable vulnerability enabling data transmission of invalid data. Impact: data integrity risk without confidentiality/availability impact per sources. Exploitation details are not provided in the documents; CVSS...

Huawei Smartphone 安全漏洞

Huawei Emui is a mobile operating system based on Android. magic Ui is a mobile operating system based on Android. Huawei Emui and Magic UI have security vulnerabilities that could be exploited by attackers to cause invalid data to be transmitted...