11778 matches found
CVE-2022-34740
Summary (CVE-2022-34740) : The vulnerability is in the NFC module of Huawei HarmonyOS devices, described as a buffer overflow. Successful exploitation may cause exceptions during NFC card registration, deletion, and activation. The NVD records CVSS v3.1 impact as Medium (I/H) with Adjacent attack...
The vulnerability of the logging function in the microprogramming software of the Cisco TelePresence Collaboration Endpoint (CE) and the Cisco RoomOS operating system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the logging function in the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call management device and the Cisco RoomOS operating system is related to the disclosure of information through registration files. Exploiting this vulnerability...
The vulnerability of Schneider Electric Data Center Expert, a monitoring software for equipment information, stems from insufficient protection of registration data. This allows attackers to gain full control over the monitoring software.
The vulnerability of the Schneider Electric Data Center Expert software monitoring tool for equipment information is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain full control over the software...
The vulnerability of the SEPCOS Single Package software for the Secheron SEPCOS control and protection relays allows a intruder to disclose protected information.
The vulnerability of the SEPCOS Single Package control and protection relay system in Secheron SEPCOS is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...
Design/Logic Flaw
A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to incorrect handling of multiple simultaneous device registrations on Cisco SSM On-Prem. A...
Fedora: Security Advisory for golang-k8s-kube-aggregator (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Satellite 6.11 Release
An update is available for libdb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rocky Enterprise Software Foundation Satellite is a systems management tool for...
[SECURITY] Fedora 36 Update: golang-k8s-kube-aggregator-1.22.0-4.fc36
Aggregator for Kubernetes-style API servers: dynamic registration, discovery summarization, secure proxy...
simplepush 资源管理错误漏洞
simplepush is a mobile application from the German company simplepush. Push notifications can be sent to your device immediately via API or third-party integration. A security vulnerability exists in simplepush that stems from the registration of a fake application using the wrong deviceTokens,...
The vulnerability of the PingID software for multi-factor authentication of applications in Windows, related to insufficient protection of registration data, allows a perpetrator to access confidential information.
The vulnerability of the PingID software for multi-factor authentication of applications involves insufficient protection of registration data. Exploiting this vulnerability can allow attackers to access confidential information...
U.S. Dept Of Defense: Stored XSS at https://█████
Description: In registeration page https://████ , first name and last name field are vulnerable to Stored Cross Site Scripting. Proof of concept For the fastly test, use this credentials to login my test account email: █████████ password: ██████ After login , alert document.cookie will triggered...
PT-2022-3285 · Ping Identity · Pingid Windows Login
Name of the Vulnerable Software and Affected Versions: PingID Windows Login versions prior to 2.8 Description: The issue is related to insufficient protection of registration data in the PingID Windows Login application, which can allow an attacker to access confidential data. The problem arises...
Authorization
ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect...
VDA Registration Step by Step and Troubleshoot common VDA Registration Failures
This article explains step by step process of VDA registration and troubleshoot common VDA registration failure issues...
VDA Registration in Citrix Cloud Explained
This article explains how to register your cloud VDA...
CVE-2021-39409
A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...
Design/Logic Flaw
A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...
PT-2022-10911 · Unknown · Online Student Rate System
Name of the Vulnerable Software and Affected Versions: Online Student Rate System version 1.0 Description: A vulnerability exists in the Online Student Rate System that allows any user to register as an administrator without needing to be authenticated. Recommendations: For Online Student Rate...
Online Student Rate System 安全漏洞
Online Student Rate System is an online grading system for students. An Access Control Error vulnerability exists in Online Student Rate System v1.0, which arises from improper access control and can be exploited by any attacker to register as an administrator without authentication...
The vulnerability of the Intel Setup and Configuration Software (SCS) data collection tool, as well as the configuration tools for the Intel Management Engine BIOS Extension and the Intel Active Management Technology implementation, related to insufficient protection of registration data, allows a perpetrator to disclose protected information.
The vulnerability of the Intel Setup and Configuration Software SCS data collection tool, as well as the configuration tools for the Intel Management Engine BIOS Extension and the Intel Active Management Technology implementation, is related to insufficient protection of registration data...