Lucene search
+L

61 matches found

Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•6 views

PT-2024-12609

Name of the Vulnerable Software and Affected Versions IBM Aspera Faspex versions 5.0.0 through 5.0.7 Description The issue allows a local user to obtain sensitive information due to improper encryption of certain data. Recommendations For versions 5.0.0 through 5.0.7, update to a version that...

3.3CVSS5.7AI score0.00064EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/12/11 12:00 a.m.•17 views

IBM Aspera Faspex encryption issue vulnerability

IBM Aspera Faspex is an International Business Machines IBM solution for rapid global person-to-person document delivery and collaboration. IBM Aspera Faspex has an encryption issue vulnerability that stems from improper encryption of certain data. An attacker could exploit the vulnerability to...

3.3CVSS5.8AI score0.00064EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/15 5:15 p.m.•21 views

CVE-2021-34751

A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege credentials on an affected device. This...

4.3CVSS5.4AI score0.00278EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/29 5:16 a.m.•49 views

CVE-2024-4611

The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decryptvalue' and on the 'doCookieAuth' functions in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to log in as any existing user on the sit...

8.1CVSS8AI score0.00501EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/29 12:00 a.m.•12 views

CVE-2024-4611: Improper Check or Handling of Exceptional Conditions

The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decryptvalue' and on the 'doCookieAuth' functions in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to log in as any existing user on the sit...

8.1CVSS5.7AI score0.00501EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•18 views

Hanwha Vision NVR and DVR security vulnerabilities

Hanwha Vision NVR and Hanwha Vision DVR are both products of Hanwha Vision, a South Korean company.Hanwha Vision NVR is a series of network video recorder devices.Hanwha Vision DVR is a series of digital video recorder devices. A security vulnerability exists in Hanwha Vision NVRs and DVRs that...

8.9CVSS5.9AI score0.00661EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/04/19 5:15 p.m.•17 views

CVE-2023-37397

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data. IBM X-Force ID: 259672...

4.4CVSS5.8AI score0.00078EPSS
SaveExploits0References2
NVD
NVD
•added 2024/04/19 5:15 p.m.•40 views

CVE-2023-37397

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data. IBM X-Force ID: 259672...

4.4CVSS4.2AI score0.00078EPSS
SaveExploits0References2
CVE
CVE
•added 2024/04/19 4:54 p.m.•98 views

CVE-2023-37397

IBM Aspera Faspex versions 5.0.0–5.0.7 have a trust/encryption issue where data is improperly encrypted, allowing a local user to obtain or modify sensitive information. This vulnerability is documented across multiple sources (IBM bulletin, NVD, CNVD/CNNVD) with the affected product/version rang...

4.4CVSS5.8AI score0.00078EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/04/19 4:15 p.m.•41 views

CVE-2023-37396

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data. IBM X-Force ID: 259671...

5.5CVSS3.7AI score0.00079EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/04/19 4:06 p.m.•43 views

CVE-2023-37396 IBM Aspera Faspex information disclosure

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryption of certain data. IBM X-Force ID: 259671...

2.5CVSS3.2AI score0.00079EPSS
SaveExploits0References2
CVE
CVE
•added 2024/04/19 4:06 p.m.•82 views

CVE-2023-37396

CVE-2023-37396 affects IBM Aspera Faspex 5.0.0–5.0.7, where a local user could obtain sensitive information due to improper encryption of certain data. The issue is documented alongside other encryption vulnerabilities in IBM’s Security Bulletin for Aspera Faspex, which notes that Faspex 5.0.8 ad...

5.5CVSS5.8AI score0.00079EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/19 12:00 a.m.•8 views

PT-2024-12611

Name of the Vulnerable Software and Affected Versions IBM Aspera Faspex versions 5.0.0 through 5.0.7 Description The issue is related to improper encryption of certain data, which could allow a local user to obtain or modify sensitive information. Recommendations For IBM Aspera Faspex versions...

4.4CVSS5.9AI score0.00078EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/04/19 12:00 a.m.•20 views

PT-2024-12610 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 5.0.0 through 5.0.7 Description: The issue allows a local user to obtain sensitive information due to improper encryption of certain data. Recommendations: For IBM Aspera Faspex versions 5.0.0 through 5.0.7, update ...

5.5CVSS5.7AI score0.00079EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/04/19 12:00 a.m.•21 views

IBM Aspera Trust Management Vulnerability

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. IBM Aspera Faspex has a trust management issue vulnerability that stems from improper encryption of certain data. An attacker could exploit the vulnerability ...

4.4CVSS5.8AI score0.00078EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/11 12:00 a.m.•21 views

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from an improper use of encryption in the TBD module, which could lead to authentication bypass...

8.4CVSS6.8AI score0.00097EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2023/02/01 5:38 a.m.•88 views

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest (CVE-2022-2068, CVE-2022-2097)

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM Rational ClearQuest. IBM Rational ClearQuest has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-2068 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary commands ...

10CVSS8.8AI score0.96391EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/29 3:31 p.m.•44 views

Security Bulletin: Multiple Vulnerabilities in node.js

Summary Security Vulnerabilities in node.js affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information.. Vulnerability Details CVEID:CVE-2022-32213 DESCRIPTION: Node.js is vulnerable to HTTP request smuggling, caused by the failure to correctly parse and...

8.1CVSS8.6AI score0.81832EPSS
SaveExploits5Affected Software1
CNVD
CNVD
•added 2022/01/26 12:00 a.m.•32 views

Unisys Messaging Integration Services存在未明漏洞

Unisys Messaging Integration Services Ntsi is a messaging-based interface between two programs from Unisys, Inc. A security vulnerability exists in Unisys Messaging Integration Services Ntsi, which stems from a network system or product that does not The vulnerability is caused by a network syste...

9.8CVSS2.2AI score0.01169EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/10/09 12:00 a.m.•58 views

Bosch Rexroth IndraMotion Mlc Licensing Issue Vulnerability

Bosch Rexroth IndraMotion Mlc is a new device that combines motion and logic control, as well as robotics control.A security vulnerability exists in Bosch Rexroth IndraMotion Mlc, which stems from a network system or product that does not properly use the relevant cryptographic algorithms, and...

10CVSS1.5AI score0.01234EPSS
SaveExploits0References1
Rows per page
Query Builder