351 matches found
CVE-2023-43089
Dell Rugged Control Center prior to 4.7 is affected by insufficient protection of the Policy folder, allowing a local standard user to modify the policy file and potentially access resources. Affected product: Dell Rugged Control Center (Windows). Root cause: inadequate protection of the Policy f...
ROS-20231115-04
Visual Studio Coden source code editor vulnerability related to improper control of code generation. code generation. Exploitation of the vulnerability may allow an attacker to execute arbitrary code Visual Studio Code source code editor vulnerability is related to insufficient protection of...
ROS-20231110-03
Vulnerability of the DirSync catlog synchronization mechanism of the Samba networking software package is related to insufficient protection of service data. Exploitation of the vulnerability could allow an attacker, acting remotely, gain unauthorized access to protected information and increase...
Nokia G-040W-Q Security Vulnerability
The Nokia G-040W-Q is a modem from Nokia of Finland. A security vulnerability exists in Nokia G-040W-Q, which arises from insufficient measures to prevent multiple failed authentication attempts...
The vulnerability of the Microsoft Visual Studio software development tool, related to insufficient protection of sensitive data, allows attackers to disclose protected information.
The vulnerability of the Microsoft Visual Studio software relates to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...
The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data, allowing attackers to gain access to protected information.
The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...
CVE-2023-25531
NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and escalation of privileges...
The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the DHCP server service for Windows operating systems is related to insufficient protection of service-related data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
PT-2023-5772 · Acronis · Acronis Agent
Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 35433 Description: The issue is related to insufficient protection of registration data, which can lead to a sensitive information leak through log files. Recommendations: For Acronis Agent versions prior...
PT-2023-4331 · Microsoft · Message Queuing +1
Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Message Queuing MSMQ in Windows operating systems. This can allow a remote attacker to obtain...
Cisco NX-OS Software NX-API Cross-Site Request Forgery (CVE-2021-1227)
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for the NX-API on an affected device. An attacker cou...
The vulnerability of the Jenkins server plugin “Dimensions” in automation tools stems from insufficient protection of service data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Jenkins server plugin “Dimensions” relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
PT-2023-9024 · Unknown · Openkeychain
Name of the Vulnerable Software and Affected Versions: OpenKeychain affected versions not specified Description: The issue is related to insufficient protection of service data in the OpenKeychain program for data encryption and electronic digital signature verification. Exploitation of this issu...
The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2023-29168 PTC Vuforia Studio Insufficiently Protected Credentials
The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication...
PT-2023-3556 · Ibm · Ibm Infosphere Information Server
Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to insufficient protection of service data, which could allow a remote attacker to obtain system information using a specially crafted query, potentially aiding ...
CVE-2022-40685
Insufficiently protected credentials in the IntelR DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclosure via network access...
PT-2023-13890 · Intel · Intel Dcm
Name of the Vulnerable Software and Affected Versions: IntelR DCM software versions prior to 5.0.1 Description: The issue concerns insufficiently protected credentials in the IntelR DCM software, which may allow an authenticated user to potentially enable information disclosure via network access...
