Lucene search
+L

1733 matches found

Vulnrichment
Vulnrichment
•added 2024/11/08 9:31 p.m.•19 views

CVE-2024-11026 Intelligent Apps Freenow App Keystore SSL.java hard-coded password

A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ch/qos/logback/core/net/ssl/SSL.java of the component Keystore Handler. The manipulation of the argument...

6.3CVSS6.6AI score0.00639EPSS
SaveExploits1References4
CVE
CVE
•added 2024/11/08 9:31 p.m.•85 views

CVE-2024-11026

CVE-2024-11026 affects Intelligent Apps Freenow App 12.10.0 on Android. The issue resides in the Keystore Handler’s SSL.java (ch/qos/logback/core/net/ssl/SSL.java), where the argument DEFAULT_KEYSTORE_PASSWORD is manipulated with the input value “changeit,” resulting in a hard-coded password. Thi...

7.4CVSS4.6AI score0.00639EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•2 views

CVE-2024-11026: Use of Hard-coded Password

A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ch/qos/logback/core/net/ssl/SSL.java of the component Keystore Handler. The manipulation of the argument...

7.4CVSS4.6AI score0.00639EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/08 12:00 a.m.•21 views

PT-2024-16715 · Unknown · Intelligent Apps Freenow App

Name of the Vulnerable Software and Affected Versions: Intelligent Apps Freenow App version 12.10.0 Description: A problem was found in the Intelligent Apps Freenow App, affecting some unknown functionality of the file ch/qos/logback/core/net/ssl/SSL.java of the component Keystore Handler. The...

7.4CVSS4.7AI score0.00639EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/11/08 12:00 a.m.•13 views

Intelligent Freenow 安全漏洞

Intelligent Freenow is a cab booking software from Intelligent. A security vulnerability exists in Intelligent Freenow version 12.10.0, which stems from the parameter DEFAULTKEYSTOREPASSWORD in the file ch/qos/logback/core/net/ssl/SSL.java that can lead to the use of hard-coded passwords...

7.4CVSS4.8AI score0.00639EPSS
SaveExploits1References4
OSV
OSV
•added 2024/11/06 3:15 a.m.•18 views

CVE-2024-49406

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability...

4.4CVSS5.8AI score0.00102EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/06 3:15 a.m.•29 views

CVE-2024-49406

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability...

6.7CVSS0.00102EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/06 2:17 a.m.•18 views

CVE-2024-49406

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability...

6.7CVSS6.8AI score0.00102EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/06 2:17 a.m.•30 views

CVE-2024-49406

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability...

6.7CVSS0.00102EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/06 2:17 a.m.•70 views

CVE-2024-49406

CVE-2024-49406 affects Samsung’s Blockchain Keystore prior to 1.3.16. The issue is improper validation of the integrity check value, enabling a local attacker with root privileges to modify transactions. Products/versions: Blockchain Keystore before 1.3.16. Root privileges are required; attack ve...

6.7CVSS6.5AI score0.00102EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/06 12:00 a.m.•1 views

CVE-2024-49406: Improper Validation of Integrity Check Value

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability...

6.7CVSS5.8AI score0.00102EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/06 12:00 a.m.•12 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to version 1.3.16, which stems from a Blockchain Keystore containing an improperly...

6.7CVSS6.3AI score0.00102EPSS
SaveExploits0References2
OSV
OSV
•added 2024/09/11 12:15 a.m.•14 views

CVE-2024-40659

In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional...

5.5CVSS5.9AI score0.00082EPSS
SaveExploits0References2
CNVD
CNVD
•added 2024/09/10 12:00 a.m.•10 views

Huawei HarmonyOS and EMUI Resources Not Closed or Released Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to a resource no...

5.5CVSS6.7AI score0.0011EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/09/10 12:00 a.m.•6 views

Fedora: Security Advisory (FEDORA-2024-029752e60b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/09/10 12:00 a.m.•4 views

Fedora: Security Advisory (FEDORA-2024-12f0caa904)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
NVD
NVD
•added 2024/09/04 3:15 a.m.•32 views

CVE-2024-45445

Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability...

5.5CVSS0.0011EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/04 3:15 a.m.•13 views

CVE-2024-45445

Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability...

5.5CVSS5.8AI score0.0011EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/04 1:54 a.m.•64 views

CVE-2024-45445

CVE-2024-45445 describes a resource leak in the Huawei HarmonyOS/Keystore module where resources are not properly closed or released, potentially impacting availability. The connected PT-2024-31634 entry confirms a Keystore resource leak with affected versions not specified and no fix/version det...

5.5CVSS7.1AI score0.0011EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2024/09/04 1:54 a.m.•22 views

CVE-2024-45445

Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability...

4CVSS6.9AI score0.0011EPSS
SaveExploits0References1
Rows per page
Query Builder