10332 matches found
CVE-2023-26567
Sangoma FreePBX 1805 through 2302 when obtained as a ,.ISO file places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of global variables. This exposes cleartext authentication credentials for the Asterisk Database MariaDB/MySQL and Asterisk Manager Interface. For example, an attack...
FreePBX 安全漏洞
FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk an IP telephony system via a GUI web-based graphical interface. A security vulnerability exists in FreePBX that stems from the addition of the AMPDBUSER, AMPDBPASS, AMPMGRUSER,...
CVE-2023-28084
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens...
CVE-2023-28084
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens...
Authentication flaw
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens...
CVE-2023-28084
CVE-2023-28084 concerns HPE OneView and HPE OneView Global Dashboard appliances. The connected sources confirm that a device dump could expose authentication tokens, constituting a confidentiality impact described as high. The affected components are HPE OneView and HPE OneView Global Dashboard a...
CVE-2023-28084 HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens...
HPE OneView和HPE OneView Global Dashboard 安全漏洞
Hewlett Packard Enterprise OneView Global Dashboard OVGD and Hewlett Packard Enterprise OneView are both products of Hewlett Packard Enterprise, a U.S.-based company. Hewlett Packard Enterprise OneView Global Dashboard is a dashboard solution, and Hewlett Packard Enterprise OneView is software th...
PT-2023-21543 · Hewlett Packard · Hpe Oneview +1
Name of the Vulnerable Software and Affected Versions: HPE OneView and HPE OneView Global Dashboard appliance affected versions not specified Description: The issue concerns HPE OneView and HPE OneView Global Dashboard appliance dumps potentially exposing authentication tokens. There is no...
Guide to Better Threat Detection and Response (XDR)
50% of security teams in a Trend Micro global study said they’re overwhelmed by the number of alerts surfaced by disconnected point products and SIEMs. Discover how XDR can enhance threat detection and response to improve a SecOps team’s efficiency and outcomes...
Akamai Announces Advanced Bot Detections, Global Recognition of Entities
...
Use-After-Free
firefox is vulnerable to Use-After-Free. This vulnerability allows an attacker to cause a memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector...
See product news and on-demand sessions from Microsoft Secure
“Great speakers and very knowledgeable.” “Brilliant.” “Wonderful and very useful.” The first Microsoft Secure on March 28, 2023, was a huge success—as this attendee feedback shows. Our virtual event brought together more than 20,000 security professionals eager to learn security best practices an...
XWiki Commons 安全漏洞
XWiki Commons is a technology library shared by several other top XWiki projects. There is a security vulnerability in XWiki Commons, which stems from the fact that it is possible to list users that are not normally viewable from the subwiki by requesting the users on the subwiki, which is only...
CVE-2023-28085
An HPE OneView Global Dashboard OVGD appliance dump may expose OVGD user account credentials...
CVE-2023-28085
An HPE OneView Global Dashboard OVGD appliance dump may expose OVGD user account credentials...
Command injection
An HPE OneView Global Dashboard OVGD appliance dump may expose OVGD user account credentials...
CVE-2023-28085
CVE-2023-28085 relates to HPE OneView Global Dashboard (OVGD). The connected documents indicate that an OVGD appliance dump may expose OVGD user account credentials. Key details from the sources show a local attack vector with low privileges required, and a high confidentiality impact, yielding a...
