The vulnerability of the systeminformation library in the Node.js software platform allows a hacker to execute arbitrary code.

The vulnerability of the systeminformation library in the Node.js software platform is related to errors in transmitting data to the parameters of the si.inetLatency, si.inetChecksite, si.services, and si.processLoad services. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2021-40366

A vulnerability has been identified in Climatix POL909 AWB module All versions V11.42, Climatix POL909 AWM module All versions V11.34. The web server of affected devices transmits data without TLS encryption. This could allow an unauthenticated remote attacker in a man-in-the-middle position to...

Huawei Emui and Magic UI uninitialized variable vulnerability

Huawei Emui is a mobile operating system based on Android. magic Ui is a mobile operating system based on Android. Huawei Emui and Magic UI have security vulnerabilities that could be exploited by attackers to cause invalid data to be transmitted...

CVE-2021-36996

There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of certain virtual information...

CVE-2021-22482

CVE-2021-22482 affects Huawei smartphones (EMUI/Magic UI). Root cause: uninitialized variable vulnerability enabling data transmission of invalid data. Impact: data integrity risk without confidentiality/availability impact per sources. Exploitation details are not provided in the documents; CVSS...

Huawei Smartphone 安全漏洞

Huawei Emui is a mobile operating system based on Android. magic Ui is a mobile operating system based on Android. Huawei Emui and Magic UI have security vulnerabilities that could be exploited by attackers to cause invalid data to be transmitted...

B. Braun Infusomat Space Large Volume Pump

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: B. Braun Melsungen AG Equipment: Infusomat Space Large Volume Pump Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Cleartext Transmission of Sensitive Information, Missing...

CVE-2020-36440

An issue was discovered in the libsbc crate before 0.1.5 for Rust. For Decoder, it implements Send for any R: Read...

华为智能手机信息泄露漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to an information disclosure vulnerability that could be exploited by attackers to cause interception of video streams during transmission...

CVE-2020-14387

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise...

Stalkerware Apps Riddled with Security Bugs

Android stalkerware apps – used to surreptitiously track people’s movements and digital activities – turn out to themselves be rife with security holes that put victims in even danger. Stalkerware can track the GPS location of a victim’s device, record conversations, capture images and snoop on...

The vulnerability of the web application of the 1C:Enterprise system, related to the storage and transmission of data in an open manner, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the 1C:Enterprise web application relates to the storage and transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability in the web interface of Cisco AsyncOS software for Cisco Email Security Appliances and Cisco Content Security Management Appliances allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco AsyncOS software web interface for Cisco Email Security Appliances and Cisco Content Security Management Appliances relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow an attacker to gain unauthorized access t...

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to gain unauthorized access to protected information.

The vulnerability of the Cisco IOS XR operating system’s command-line interface CLI is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Design/Logic Flaw

IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmission of sensitive information across the network. IBM X-Force ID: 190990...

The vulnerability of the Fanuc 32i numerical program-controlled controller, related to the transmission of data in an open manner, allows a intruder to intercept control data and enhance their privileges.

The vulnerability of the Fanuc 32i numerical control controller lies in the transfer of data in an open manner. Exploiting this vulnerability can allow a intruder to intercept the control commands and enhance their privileges...

Code injection

Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text...

Information disclosure

The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information on the NIO 50 all versions...

CVE-2020-25155

CVE-2020-25155 affects NEXCOM NIO 50 devices; the vulnerability is cleartxt transmission of sensitive information (cleartext transmission of sensitive data). All versions of NIO 50 are affected. The issue arises from transmitting unencrypted sensitive information, which may allow an attacker to a...

CVE-2020-27607

In BigBlueButton before 2.2.28 or earlier, the client-side Mute button only signifies that the server should stop accepting audio data from the client. It does not directly configure the client to stop sending audio data to the server, and thus a modified server could store the audio data and/or...