The vulnerability of FortiOS operating systems and FortiProxy proxy servers related to insufficient protection of registration data allows attackers to expose confidential information.

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to obtain and disclose confidential information...

The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 lies in the insufficient protection of registration data, allowing attackers to disclose the protected information.

The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the Fortinet FortiNAC network access control mechanism lies in the insufficient protection of registration data, allowing attackers to retrieve user password information.

The vulnerability of the Fortinet FortiNAC network access control device is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to retrieve user password information by unauthorized access to the database...

The vulnerability of the NGINX Agent and the NGINX Instance Manager automation platform, related to insufficient protection of registration data, allows a perpetrator to gain access to secret keys.

The vulnerability of the NGINX Agent and the NGINX Instance Manager automation platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain access to secret keys...

The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the insufficient protection of registration data, which allows attackers to enhance their privileges and disclose sensitive information.

The vulnerability of Intel Active Management Technology and Standard Manageability implementations is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and disclose sensitive information...

The vulnerability of the systemd.txt file on the NGINX Controller platform allows a hacker to disclose protected information.

The vulnerability of the systemd.txt file on the NGINX Controller application monitoring and management platform is related to insufficient protection for registration data. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by this system...

The vulnerability of the PLC programming software EcoStruxure Control Expert, the automation system ProcessExpert, and the configuration software SCADAPack RemoteConnect lies in the insufficient protection of registration data, allowing unauthorized access by attackers to the device.

The vulnerabilities of the PLC programming software EcoStruxure Control Expert, the automation system ProcessExpert, and the configuration software SCADAPack RemoteConnect are related to insufficient protection for registration data. Exploiting these vulnerabilities can allow attackers to gain...

PT-2022-4229 · Vmware · Vmware Vrealize Operations

Name of the Vulnerable Software and Affected Versions: VMware vRealize Operations affected versions not specified Description: The issue is related to insufficient protection of registration data, which can lead to information disclosure. A low-privileged malicious actor with network access can...

The vulnerability of Becton Dickinson’s Pyxis medication and supplies management solutions lies in the insufficient protection of registration data, allowing unauthorized access to electronic protected medical information (ePHI).

The vulnerability of Becton Dickinson’s Pyxis software for managing medications and related supplies is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to electronically protected medical information...

The vulnerability of the microprogrammed software of Modicon M241 and Modicon M251 control units lies in the insufficient protection of registration data, allowing attackers to intercept login credentials and access the web application.

The vulnerability of the microprogrammed logic controllers Modicon M241 and Modicon M251 is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to intercept login credentials and gain access to the web application...

The vulnerability of Schneider Electric Data Center Expert, a monitoring software for equipment information, stems from insufficient protection of registration data. This allows attackers to gain full control over the monitoring software.

The vulnerability of the Schneider Electric Data Center Expert software monitoring tool for equipment information is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain full control over the software...

The vulnerability of the SEPCOS Single Package software for the Secheron SEPCOS control and protection relays allows a intruder to disclose protected information.

The vulnerability of the SEPCOS Single Package control and protection relay system in Secheron SEPCOS is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

The vulnerability of the cURL command-line utility stems from insufficient protection of registration data, allowing an attacker to gain unauthorized access to the protected information.

The vulnerability of the cURL command-line utility is related to attempts by the application to perform redirections during the authentication process. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by redirecting users to other URLs...

The vulnerability of the Azure Site Recovery disaster recovery tool lies in the insufficient protection of registration data, allowing attackers to escalate their privileges.

The vulnerability of the Azure Site Recovery recovery tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

The vulnerability of the Azure Site Recovery disaster recovery tool lies in the insufficient protection of registration data, allowing attackers to escalate their privileges.

The vulnerability of the Azure Site Recovery recovery tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

PT-2022-1883 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

The vulnerability of the Ceph storage system, related to insufficient protection of registration data, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Ceph storage system lies in the rehydration of user data. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the D-Link DIR-2640-US router’s microprogramming software lies in the insufficient protection of registration data, allowing attackers to elevate their privileges to the root level.

The vulnerability of the D-Link DIR-2640-US router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

The vulnerability of the software installer for Cisco ThousandEyes Recorder allows a hacker to disclose protected information.

The vulnerability of the software installer for Cisco ThousandEyes Recorder relates to insufficient protection of registration data. Exploiting this vulnerability could allow a hacker to disclose protected information...

The vulnerability of the libpq library in the PostgreSQL database management system allows a hacker to execute a type of “man-in-the-middle” attack.

The vulnerability of the libpq library in the PostgreSQL database management system is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” attack...