Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2021-2922)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : libgcrypt (EulerOS-SA-2021-2922)

According to the versions of the libgcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries...

EulerOS 2.0 SP9 : libgcrypt (EulerOS-SA-2021-2914)

According to the versions of the libgcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries...

CVE-2021-43552

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX PIC iX Versions B.02, C.02, and C.03...

CVE-2021-43552 Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX PIC iX Versions B.02, C.02, and C.03...

Apple macOS Mojave has an unspecified vulnerability (CNVD-2022-00609)

Apple macOS Mojave is a set of specialized operating systems developed for Mac computers by Apple USA. Apple macOS Mojave versions prior to 10.14 have a security vulnerability that stems from the possibility that agency recovery keys may be incorrectly reported as present. No detailed vulnerabili...

Object Properties Collection Task finishes with the "fail" status when VMware Site Recovery Manager is used for monitored vCenter server(s)

Challenge When one or more federated SSO vCenter Servers joined to VMware Site Recovery Manager are added to Veeam ONE, the Object Properties Collection Task may complete with a "fail" status. Correlated with the task completion time, an entry in the Event Logs will display "An item with the same...

Apple macOS Mojave 安全漏洞

Apple macOS Mojave is a set of specialized operating systems developed for Mac computers by Apple USA. Apple macOS Mojave versions prior to 10.14 have a security vulnerability that stems from the possibility that agency recovery keys may be incorrectly reported as present. No detailed vulnerabili...

CVE-2021-36750

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...

Enc Security Enc DataVault 信息泄露漏洞

Enc Security Enc DataVault is a solution from the Dutch company Enc Security. Turns any Usb drive into a secure removable disk for important files. An information disclosure vulnerability exists in Enc Security ENC DataVault 7.1.1W, which stems from VaultAPI v67 incorrectly handling key derivatio...

The vulnerability of the Microprogrammed Ethernet Module WISE-4060 and Adam-6050 D lies in errors in the password recovery mechanism, allowing attackers to reset the settings to the default values.

The vulnerability of the Ethernet microprogramming systems WISE-4060 and Adam-6050 D is related to errors in the password recovery mechanism. Exploiting this vulnerability allows a remote attacker to restore default settings using a specially crafted data packet...

CVE-2021-44875

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery...

CVE-2021-44875

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery...

CVE-2021-44875

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery...

Design/Logic Flaw

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery...

CVE-2021-44875

CVE-2021-44875 affects Dalmark Systems Systeam 2.22.8 build 1724. The issue is a user-enumeration flaw in the password-recovery flow: the application returns messages that differ depending on whether a user exists, enabling a brute-force attack to identify valid users. The vulnerability is docume...

CVE-2021-44875

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery...

No way to remove GasThrottle from VaderPool after deployment

Handle TomFrenchBlockchain Vulnerability details Impact Potential DOS on swaps on VaderPool Proof of Concept BasePool makes use of a validateGas modifier on swaps which checks that the user's gas price is below the value returned by FASTGASORACLE. Should FASTGASORACLE be compromised to always...

The vulnerability of the emergency recovery function of the Cisco SD-WAN vManage centralized system allows a intruder to gain unauthorized access to the device.

The vulnerability of the emergency recovery function of the Cisco SD-WAN vManage centralized system management platform is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the...

The vulnerability of the Team Password Manager application, related to the lack of a password recovery mechanism, allows a hacker to gain unauthorized access to the protected information.

The vulnerability of the Team Password Manager password management app is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by resetting the password...