3629 matches found
CVE-2021-35232 Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries
Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users ...
CVE-2021-45696
An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...
Design/Logic Flaw
An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...
PT-2021-20854 · Solarwinds · Solarwinds Web Help Desk
Name of the Vulnerable Software and Affected Versions: SolarWinds Web Help Desk affected versions not specified Description: A security issue has been discovered in the SolarWinds Web Help Desk product, where hard-coded credentials allow an attacker with local access to the host machine to execut...
CVE-2021-45696
An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...
CVE-2021-45696
An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...
CVE-2021-45696
An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...
CVE-2021-45696: Use of a Broken or Risky Cryptographic Algorithm
An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...
CVE-2021-43989
mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes...
Unspecified Vulnerability in mySCADA myPRO
mySCADA myPRO is an HMI/SCADA system designed primarily for the visualization and control of industrial processes. A security vulnerability exists in mySCADA myPRO that can be exploited by an attacker to crack a previously retrieved password hash...
CVE-2021-35232
Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users ...
CVE-2021-35234
Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information...
CVE-2021-35234
Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information...
CVE-2021-35234 Exposed Dangerous Functions - Privileged Escalation
Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information...
CVE-2021-35234
Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information...
PT-2021-20856 · Solarwinds · Solarwinds Network Performance Monitor
Name of the Vulnerable Software and Affected Versions: SolarWinds Network Performance Monitor affected versions not specified Description: The issue involves numerous exposed dangerous functions within Orion Core, allowing for read-only SQL injection and leading to privileged escalation. An...
SolarWinds Orion SQL注入漏洞
SolarWinds Orion is the centerpiece of an IT management portfolio from SolarWinds. It provides a stable and scalable architecture that includes data collection, processing, storage, and representation. SolarWinds Orion suffers from a SQL injection vulnerability that can be exploited by an attacke...
GGLocker iOS 安全漏洞
GgLocker Ios is a simple digital locker by Gabriele Greco personal developer. A security vulnerability exists in the GGLocker iOS app that stems from an insecure data store containing password hashes, leading to authentication bypass...
PT-2021-6787
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions Mitsubishi Electric MELSEC iQ-R series...
