IBM CICS TX Advanced Application Server Unauthorized Access

The vulnerability of the IBM CICS TX Advanced application server is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ZZCMS index php information leakage vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. An information disclosure vulnerability exists in ZZCMS 2022, which stems from the program's inadequate protection of sensitive information, and can be exploited by an attacker to send a request to "/admin/index php?Server" to...

Dell BIOS Information Disclosure Vulnerability

Dell BIOS is an embedded software on a small memory chip on the motherboard of a computer from Dell, U.S.A. An information disclosure vulnerability exists in Dell BIOS, which stems from insufficient protection of sensitive information by the application and could be exploited by a locally...

PT-2022-7466 · Unknown · Masterscada

Name of the Vulnerable Software and Affected Versions: MasterSCADA affected versions not specified Description: The issue is related to insufficient protection of service data in the MasterSCADA SCADA system. Exploitation of this issue may allow an attacker to gain unauthorized access to the...

Information disclosure

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-30944

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30601

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access...

PT-2022-37673

Уязвимость модуля защиты конечных точек Anti-Ransomware средства анализа сетевого трафика, сетевого обнаружения и реагирования Cortex XDR Agent операционных систем Windows связана с недостаточной защитой служебных данных. Эксплуатация уязвимости может позволить нарушителю получить...

Google Android Information Disclosure Vulnerability (CNVD-2022-65637)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability. The vulnerability stems from inadequate protection of sensitive information and can be exploited by attackers to obtain sensitive information...

IBM QRadar SIEM 信息泄露漏洞

IBM QRadar SIEM is an IBM solution that leverages security intelligence to protect assets and information from advanced threats. IBM QRadar SIEM has an information leakage vulnerability that stems from the program's lack of protection for sensitive information, which could be exploited by an...

Oracle Identity Cloud Service Unauthorized Access

The vulnerability of the Oracle Identity Cloud Service’s security and identification platform is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Insufficiently Protected Credentials in PowerJob

An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save...

CVE-2022-30018

Mobotix Control Center MxCC through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access...

Cluster Shared Volumes File System Unauthorized Access

The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Azure Site Recovery Privilege Escalation

The vulnerability of the Azure Site Recovery recovery tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

PT-2022-1886 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

CVE-2022-22321

IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protection. IBM X-Force ID: 218368...

CVE-2022-22321

IBM MQ Appliance CVE-2022-22321 affects the 9.2 CD and 9.2 LTS releases, where local-messaging user passwords are stored using a hash that provides insufficient protection. The vulnerability can lead to exposure of sensitive data via password hashes. IBM’s remediation guidance (in IBM MQ Applianc...

Security Bulletin: IBM MQ Appliance affected by a password hash that provides insufficient protection (CVE-2022-22321)

Summary IBM MQ Appliance has remedied a password hash that provides insufficient protection. Vulnerability Details CVEID: CVE-2022-22321 DESCRIPTION: IBM MQ Appliance local messaging users stored with a password hash that provides insufficient protection. CVSS Base score: 5.1 CVSS Temporal Score:...