CISA and FBI Release Joint Advisory on Iranian APT Actor Targeting Voter Registration Data

The Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of Investigation FBI have released a joint cybersecurity advisory on an Iranian advanced persistent threat APT actor targeting U.S. state websites, including elections websites, to obtain voter registration data. Joi...

The vulnerability of the Undertow web server arises from insufficient protection of registration data, allowing attackers to disclose sensitive information.

The vulnerability of the Undertow web server is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the command-line interface of the Cisco AsyncOS operating system allows a hacker to gain unauthorized access to protected information. This vulnerability is exploitable by attackers who target the Cisco Email Security Appliance for security management and the Cisco Content Security Management Appliance for content management systems.

The vulnerability of the Cisco AsyncOS command-line interface for the Cisco Email Security Appliance and the Cisco Content Security Management Appliance security management system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker,...

The vulnerability of the D-Link DSL-2875AL router’s microprogramming software lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the D-Link DSL-2875AL router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using a specially created reques...

The vulnerability of the configd Streamer Log component in the JunOS Evolved operating system, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the configd component in the Streamer Log system of the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the Intel Active Management Technology implementation lies in the insufficient protection of registration data, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Intel Active Management Technology implementation is related to insufficient protection of registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the EvoSharedObjStore component of the JunOS Evolved operating system, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the EvoSharedObjStore component in the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ev.ops configuration file of the JunOS Evolved operating system, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ev.ops configuration file in the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the JunOS operating system in Juniper vMX virtual routers allows attackers to increase their privileges.

The vulnerability of the Junos operating system in Juniper vMX virtual routers lies in the storage of pre-installed registration data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the configd Trace Handler component in the JunOS Evolved operating system, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the configd Trace Handler component in the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

The vulnerability of the JunOS Evolved operating system’s configuration file objmon allows a intruder to gain unauthorized access to protected information.

The vulnerability of the JunOS Evolved operating system’s configuration file objmon is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the JunOS operating system’s NFX250 Series routers allows a hacker to gain full control over the system.

The vulnerability of the JunOS operating system’s NFX250 Series routers lies in the use of pre-installed registration data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full control over the system...

The vulnerability of the OpenId Connect service’s framework for Apache CXF allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OpenId Connect service for Apache CXF web services is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability in the web management interface of the Cisco Prime License Manager (PLM) allows a perpetrator to gain access to the device.

The vulnerability of the Web management interface of the Cisco Prime License Manager PLM software is related to errors in managing registration data. Exploiting this vulnerability can allow a malicious actor to gain access to the device remotely...

The vulnerability of the VM-Series network interface cards is related to insufficient protection of registration data, which allows attackers to disclose sensitive information and cause service failures.

The vulnerability of the VM-Series network firewalls is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose protected information and cause service failures...

The vulnerability of the /var/lib/ovirt-hosted-engine-setup/cockpit/ansibleVarFileXXXXXX.var component of the cockpit-ovirt plugin, a software tool for managing virtualization of servers and workstations on Red Hat Virtualization, allows a attacker to expose the credentials of a privileged user.

The vulnerability of the /var/lib/ovirt-hosted-engine-setup/cockpit/ansibleVarFileXXXXXX.var component of the cockpit-ovirt plugin, a software tool for managing virtualization of servers and workstations in Red Hat Virtualization, is related to insufficient protection of registration data...

The vulnerability of the built-in software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the insufficient protection of registration data. This allows attackers to obtain administrator login credentials.

The vulnerability of the built-in software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the insufficient...

The vulnerability of the built-in software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the insufficient protection of registration data. This allows attackers to obtain administrator login credentials.

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the insufficient...

The vulnerability of the etc/artemis-users.properties component of the asynchronous messaging system Apache ActiveMQ Artemis is related to insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the etc/artemis-users.properties component in the asynchronous message exchange system using Apache ActiveMQ Artemis is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

The vulnerability of the audit log component of the Cisco Digital Network Architecture (DNA) Center allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the audit log component of the Cisco Digital Network Architecture DNA Center system is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...