Microsoft ACI Confidential Containers Disclosure

The vulnerability of Microsoft ACI Confidential Containers relates to the storage of information in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Apica Loadtest Plugin Unauthorized Access

The vulnerability of the Apica Loadtest plugin for Jenkins-based automation servers lies in the way registration data is stored in an open manner within the config.xml file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Jenkins automation server plugin VAddy Key Disclosure

The vulnerability of the Jenkins automation server plugin VAddy lies in the storage of keys in an open manner within the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...

Jenkins Testsigma Test Plan Plugin Key Disclosure

The vulnerability of the Jenkins automation server’s Testsigma Test Plan plugin lies in the storage of keys in an open manner within the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...

ReadyAPI Functional Testing Plugin Information Disclosure

The vulnerability of the ReadyAPI Functional Testing plugin for the Jenkins automation server lies in the way registration data is stored in an open manner within the config.xml file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Applitools Eyes Plugin Unauthorized Access

The vulnerability of the Applitools Eyes plugin in Jenkins automation servers lies in the fact that information is stored in an open manner within the config.xml configuration file. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to the...

TP-Link Tapo H200 Open Information Disclosure

The vulnerability of TP-Link Tapo H200 smart home control software relates to the storage of information in an open manner. Exploiting this vulnerability could allow a intruder to obtain Wi-Fi credentials...

Veeam Backup & Replication Information Disclosure

The vulnerability of the Veeam Backup & Replication protection tool for cloud, virtual, and physical systems lies in the storage of confidential information in an open manner. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Important: Red Hat Security Advisory: Updated 8.0 container image is now available in the Red Hat Ecosystem Catalog.

Updated rhceph-8.0 container image is now available in the Red Hat Ecosystem Catalog. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support...

Mozilla Firefox Push Notifications Information Disclosure

The vulnerability of push-notifications in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to open storage of information. Exploiting this vulnerability allows a remote attacker to gain access to confidential information...

Directory0.js D-Link Router Disclosure

The vulnerability of the dirary0.js microprogramming software for D-Link DIR-140L and DIR-640L routers is related to the storage of user credentials in an open manner. Exploiting this vulnerability can allow a remote attacker to disclose the protected information administrator password...