30127 matches found
Dell Data Lakehouse Encryption Issues Vulnerabilities
Dell Data Lakehouse is a fully integrated data platform from Dell, Inc. An encryption issue vulnerability exists in Dell Data Lakehouse version 1.0.0.0, which stems from a missing encryption of sensitive data contained in the DDAE. An attacker could exploit this vulnerability to cause information...
Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0465)
Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that...
Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0464)
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of...
ALSA-2024:4762 Important: runc security update
The runC tool is a lightweight, portable implementation of the Open Container Format OCF that provides container runtime. Security Fixes: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 For more details about the security issues, including the impact...
Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0466)
The function X509VERIFYPARAMadd0policy is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate...
Brocade SANnav TLS/SSL Man-in-the-Middle
The vulnerability of the TLS/SSL software components used for managing SAN networks in Brodage SANnav systems is related to insufficient encryption reliability. Exploiting this vulnerability could allow a remote attacker to carry out a “man-in-the-middle” attack and gain unauthorized access to...
RHEL 9 : runc (RHSA-2024:4762)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:4762 advisory. The runC tool is a lightweight, portable implementation of the Open Container Format OCF that provides container runtime. Security Fixes:...
Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2022-2097)
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of 'in place' encryption...
Hikvision IP Cameras Missing Encryption of Sensitive Data (CVE-2017-14953)
HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an...
GHSA-6PFF-FMH2-4MMF Apache CXF Denial of Service vulnerability in JOSE
An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform a denial of service attack by specifying a large value for this parameter in a token...
Important: Red Hat Security Advisory: qt5-qtbase security update
An update for qt5-qtbase is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Important: Red Hat Security Advisory: qt5-qtbase security update
An update for qt5-qtbase is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update a...
CVE-2024-38302
Dell Data Lakehouse, versions 1.0.0.0, contains a Missing Encryption of Sensitive Data vulnerability in the DDAE Starburst. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2024-38302
Dell Data Lakehouse, versions 1.0.0.0, contains a Missing Encryption of Sensitive Data vulnerability in the DDAE Starburst. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2024-38302
Dell Data Lakehouse, versions 1.0.0.0, contains a Missing Encryption of Sensitive Data vulnerability in the DDAE Starburst. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2024-38302
CVE-2024-38302 affects Dell Data Lakehouse 1.0.0.0, with a Missing Encryption of Sensitive Data vulnerability in the DDAE (Starburst). A low-privileged attacker with adjacent network access could cause information disclosure. The connected sources provide this vulnerability detail but do not incl...
CVE-2024-38302
Dell Data Lakehouse, versions 1.0.0.0, contains a Missing Encryption of Sensitive Data vulnerability in the DDAE Starburst. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...
qt5-qtbase security update
5.15.3-8 - HTTP2: Delay any communication until encrypted can be responded to Resolves: RHEL-46340...
PT-2024-5198
Name of the Vulnerable Software and Affected Versions: Dell Data Lakehouse version 1.0.0.0 Description: The issue is related to a Missing Encryption of Sensitive Data vulnerability in the DDAE Starburst component. This could allow a low-privileged attacker with adjacent network access to...
Dell Data Lakehouse security vulnerabilities
Dell Data Lakehouse is a fully integrated data platform from Dell, Inc. An encryption issue vulnerability exists in Dell Data Lakehouse version 1.0.0.0, which stems from a missing encryption of sensitive data contained in the DDAE. An attacker could exploit this vulnerability to cause information...