379 matches found
A vulnerability exists in the properties of the vAppConfig component of the VMware vCenter Server management tool, which allows an attacker to access user credentials.
The vulnerability in the vAppConfig properties of the VMware vCenter Server management tool is related to insufficient protection for registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to user registration data...
The vulnerability of the SAP Landscape Management automation system, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SAP Landscape Management automation system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the sal_util_str_encrypt() function (libsal.so) in the software for Zyxel routers series GS1900 allows a attacker to disclose protected information.
The vulnerability of the salutilstrencrypt function libsal.so in Zyxel router microsoftware of the GS1900 series exists due to the rigid encoding of registration data. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
Vulnerability of SAP SQL Anywhere, SAP IQ, and SAP Dynamic Tiering database management systems, related to insufficient protection of registration data, allows unauthorized access by attackers to protected information.
The vulnerability of SAP SQL Anywhere, SAP IQ, and SAP Dynamic Tiering database management systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
PT-2020-1391 · Cisco · Cisco Data Center Network Manager
Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager DCNM affected versions not specified Description: The issue concerns the authentication mechanisms of Cisco Data Center Network Manager DCNM, where multiple vulnerabilities could allow an unauthenticated,...
The vulnerability of the software for collecting, archiving, and analyzing data from Power Generation Information Manager and Plant Connect systems lies in the insufficient protection of registration data. This allows attackers to bypass authentication procedures and gain access to the device’s accounting data.
The vulnerability of the Power Generation Information Manager and Plant Connect software in terms of data collection, archiving, and analysis is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and...
The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software lies in the insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the process for creating management certificates, which involves identifying and accessing the server for service providers of Juniper Networks’ SBR Carrier, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the process for creating certificates that manage identity and access to servers for Juniper Networks SBR Carrier service providers is related to deficiencies in the protection of registration data. Exploiting this vulnerability could allow a perpetrator to gain unauthorized...
The vulnerability of the McAfee Advanced Threat Defense software’s database storage mechanism allows a malicious actor to gain unauthorized access to the root password.
The vulnerability of the McAfee Advanced Threat Defense software’s database storage component is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to obtain unauthorized access to the root password...
The vulnerability of the libcurl library, related to insufficient protection of registration data, allows attackers to gain unauthorized access to protected information.
The vulnerability of the libcurl library is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Web-GUI component of the microprogramming software for WAGO Series 750-88x and WAGO Series 750-87x allows a hacker to alter the settings.
The vulnerability of the Web-GUI component of the microprogramming software for WAGO Series 750-88x and WAGO Series 750-87x exists due to the rigid coding of registration data. Exploiting this vulnerability could allow a malicious actor to remotely alter settings...
A View into Top Level Domain (TLD) Abuse
Data science and security research teams in the carrier organization at Akamai process massive volumes of DNS queries every day to detect and track malicious activity. The data is live-streamed from DNS resolvers deployed in diverse service provider networks in every region of the world. Provider...
CVE-2019-17114
A stored and reflected cross-site scripting XSS vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allows remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/userPreregistration.jsp. The preRegistrationData parameter is vulnerable: a reflected cross-site scriptin...
The vulnerability in the software infrastructure of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to obtain the administrator password.
The vulnerability of Cisco Enterprise NFV Infrastructure Software’s web portal software relates to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to obtain administrator passwords remotely...
The vulnerability of the PlaintextPasswordEncoder class implementation in the Java framework for securing Spring Security industrial applications allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the PlaintextPasswordEncoder class implementation in the Spring Security Java framework, which is designed for securing industrial applications, is related to deficiencies in managing registration data. Exploiting this vulnerability could allow an attacker, operating remotely...
The vulnerability of the coTURN server function, related to an error in the encoding of registration data, allows a hacker to gain access to the server under the authority of the administrator.
The vulnerability of the coTURN server function is related to an error in the encoding of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the server through the telnet port under the authority of the administrator...
The vulnerability of the urllib.parse.urlsplit and urllib.parse.urlparse functions in the Python interpreter allows a attacker to disclose protected information, read or write arbitrary data, or cause a denial-of-service attack.
The vulnerability of the urllib.parse.urlsplit and urllib.parse.urlparse functions in the Python interpreter is related to errors in handling registration data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, read or write arbitrary data, or cause service...
The vulnerability of the PowerSCADA Expert system for data collection and process control allows a perpetrator to gain access to user account information due to insufficient protection of registration data.
The vulnerability of the PowerSCADA Expert system for data collection and process control is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain access to user account information...
The vulnerability of the urllib3 module in the Python programming language, related to errors in handling registration data, allows attackers to disclose protected information.
The vulnerability of the urllib3 module in the Python programming language is related to errors in handling registration data. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this module...
PT-2019-2858 · Python +6 · Python +6
Name of the Vulnerable Software and Affected Versions: Python affected versions not specified Description: The issue is related to errors in handling registration data in the urllib.parse.urlsplit and urllib.parse.urlparse functions of the Python programming language interpreter. Exploitation of...