PT-2022-1886 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

CVE-2022-22321

IBM MQ Appliance CVE-2022-22321 affects the 9.2 CD and 9.2 LTS releases, where local-messaging user passwords are stored using a hash that provides insufficient protection. The vulnerability can lead to exposure of sensitive data via password hashes. IBM’s remediation guidance (in IBM MQ Applianc...

CVE-2022-22321

IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protection. IBM X-Force ID: 218368...

Security Bulletin: IBM MQ Appliance affected by a password hash that provides insufficient protection (CVE-2022-22321)

Summary IBM MQ Appliance has remedied a password hash that provides insufficient protection. Vulnerability Details CVEID: CVE-2022-22321 DESCRIPTION: IBM MQ Appliance local messaging users stored with a password hash that provides insufficient protection. CVSS Base score: 5.1 CVSS Temporal Score:...

CVE-2022-22321

IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protection. IBM X-Force ID: 218368...

The vulnerability of the Android application Mahavitaran, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Android application “Mahavitaran” is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2021-3830 · Microsoft · Windows Services For Nfs +1

Name of the Vulnerable Software and Affected Versions: Windows Services for NFS affected versions not specified Description: The issue is related to insufficient protection of service data, which can be exploited by a remote attacker to gain unauthorized access to protected information. This can...

PT-2021-7891 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft SharePoint Server, which can be exploited by a remote attacker to gain unauthorized access t...

PT-2021-5680 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Storage Spaces Controller driver, which can allow an attacker to gain unauthorized access to protected information. Th...

PT-2021-5679 · Microsoft · Windows Remote Assistance +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Assistance affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Remote Assistance tool. This can allow a remote attacker to gain unauthorized access to...

The vulnerability of the index.php component in the PHP Proxy web proxy script allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the index.php component in the PHP Proxy web proxy script is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the online business analytics service IBM Cognos Analytics, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the online business analytics service IBM Cognos Analytics is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Code injection

An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The remember-me cookie CBLOGIN issued by the application contains the encrypted user's credentials. However, due to a bug in the application code, those credentials are encrypted using a...

CVE-2020-26515

An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The remember-me cookie CBLOGIN issued by the application contains the encrypted user's credentials. However, due to a bug in the application code, those credentials are encrypted using a...

The vulnerability in the web management interface of the Cisco DNA Center allows a attacker to perform a CSRF attack.

The vulnerability in the web interface of the Cisco DNA Center management console is related to insufficient protection when entering CSRF requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...

CVE-2021-22307

There is a weak algorithm vulnerability in Mate 3010.0.0.203C00E201R7P2. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module...

CVE-2021-22307

CVE-2021-22307 affects Huawei Mate 30 smartphones with firmware 10.0.0.203 (C00E201R7P2). The issue is a weak algorithm that leaves protection for certain modules insufficient, allowing local attackers to compromise module integrity. CVSS indicates LOCAL access, low attack complexity, with HIGH i...

Security Advisory - Weak Algorithms Vulnerability in Huawei Smartphone

There is a weak algorithm vulnerability in Huawei smartphone. The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module. Vulnerability ID: HWPSIRT-2020-37421 This vulnerability has been assigne...

CVE-2021-1219 Cisco Smart Software Manager Satellite Static Credential Vulnerability

A vulnerability in Cisco Smart Software Manager Satellite could allow an authenticated, local attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of static credentials in the affected software. An attacker could exploit this...

Cisco Smart Software Manager Satellite Static Credential Vulnerability

A vulnerability in Cisco Smart Software Manager Satellite could allow an authenticated, local attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of static credentials in the affected software. An attacker could exploit this...