IBM Cloud Automation Manager Information Disclosure Vulnerability

IBM Cloud Automation Manager is a multi-cloud self-service management platform from IBM USA. The platform supports the deployment of cloud infrastructure in multiple clouds. An information disclosure vulnerability exists in IBM Cloud Automation Manager, which can be exploited by an attacker to...

CVE-2019-3687

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to...

EulerOS Virtualization for ARM 64 3.0.5.0 : python-requests (EulerOS-SA-2020-1043)

According to the version of the python-requests package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a...

IotShark - Monitoring And Analyzing IoT Traffic

IoTShark is a IOT monitoring service that allows users to monitor their IOT devices for trends in data sent/received. Ordinarily, setting up a man in the middle attack with proper configurations can take up quite a bit of time, and may seem dauntingly impossible for those with little to no...

EulerOS 2.0 SP8 : python-requests (EulerOS-SA-2020-1027)

According to the version of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-ht...

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

CVE-2019-3431

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access...

D-Link DIR-615 Authorization Issues Vulnerability

D-Link DIR-615 is a small wireless router product from AUO D-Link. The D-Link DIR-615 is vulnerable to an authorization issue. An attacker can exploit this vulnerability by sniffing network traffic to obtain the IP address of the user and the router, or even obtain a public IP address and take ov...

CVE-2019-17393

The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP in cleartext that can be sniffed by unauthorized actors. Basic authentication is used for the authentication, making it possible to base64 decode the sniffed credentials and discover the username and...

CVE-2019-17393

The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP in cleartext that can be sniffed by unauthorized actors. Basic authentication is used for the authentication, making it possible to base64 decode the sniffed credentials and discover the username and...

Authentication flaw

The Yale Bluetooth Key application for mobile devices allows unauthorized unlock actions by sniffing Bluetooth Low Energy BLE traffic during one authorized unlock action, and then calculating the authentication key via simple computations on the hex digits of a valid authentication request. This...

CVE-2019-17627

Summary: CVE-2019-17627 affects the Yale Bluetooth Key mobile app and Yale ZEN-R lock family. The issue lets an attacker sniff BLE traffic during an authorized unlock and then compute the authentication key from the hex digits of a valid authentication request, enabling unauthorized unlock action...

CVE-2019-17356

The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network...

CVE-2008-1394

Plone CMS before 3 places a base64 encoded form of the username and password in the ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network...

CVE-2008-3747

The 1 geteditpostlink and 2 geteditcommentlink functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie...

CVE-2019-16924

The Nulock application 1.5.0 for mobile devices sends a cleartext password over Bluetooth, which allows remote attackers after sniffing the network to take control of the lock...

Default credentials

The Nulock application 1.5.0 for mobile devices sends a cleartext password over Bluetooth, which allows remote attackers after sniffing the network to take control of the lock...

CVE-2019-16924

CVE-2019-16924 affects the Nulock mobile app (1.5.0). The vulnerability is that the app sends a cleartext password over Bluetooth , enabling remote attackers (after sniffing the network) to take control of the lock. The connected Red Hat/NVD entries corroborate the same description. No explicit r...

CVE-2019-16924

The Nulock application 1.5.0 for mobile devices sends a cleartext password over Bluetooth, which allows remote attackers after sniffing the network to take control of the lock...

CVE-2019-15891

An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has misleading information that could lead to a conclusion that the application has a built-in bulletproof content sniffing protection...