334 matches found
GHSA-C5VJ-F36Q-P9VG Password Shucking Vulnerability
Impact An improper implementation was found in the password storage process. All hashed passwords stored in Shield v1.0.0-beta.3 or earlier are easier to crack than expected due to the vulnerability. Therefore, they should be removed as soon as possible. If an attacker gets 1 the user's hashed...
PT-2023-2088 · Pimcore · Pimcore
Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.18 Description: The issue is related to a Cross-site Scripting XSS - Stored vulnerability in the pimcore/pimcore GitHub repository. This vulnerability is associated with the blacklistAction function, whi...
PT-2023-13034 · Unknown · Mv Idigital Clinic Enterprise
Name of the Vulnerable Software and Affected Versions: MV iDigital Clinic Enterprise iDCE version 1.0 Description: The issue concerns the storage of passwords in cleartext. There is no information provided about the estimated number of potentially affected devices worldwide or details about...
Unrestricted file upload
Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage...
SUSE CVE-2019-13666
Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
SUSE CVE-2021-21209
Inappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
SUSE CVE-2022-1312
Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...
NVIDIA BMC 安全漏洞
NVIDIA BMC is an OpenBMC open software framework from NVIDIA. NVIDIA BMC suffers from a security vulnerability that originates from storing user passwords in a fuzzy form in a host-accessible database, resulting in exposed credentials...
CVE-2022-3927 The affected products store public and private key that are used to sign and protect custom parameter set files from modification.
The affected products store both public and private key that are used to sign and protect Custom Parameter Set CPS file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file. This iss...
CVE-2022-44017
An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim's account after the victim logged out - /LMS/LM/main can be used for this. This is due to the credentials not being cleaned from the local storage after...
CVE-2022-4312
A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could allow an unauthorized user with access the email and short messaging service SMS accounts configuration files to discover the associated simple mail transfer protocol SMTP account...
Hewlett Packard Enterprise Nimble Storage systems 安全漏洞
Hewlett Packard Enterprise Nimble Storage systems is a predictive flash storage technology from Hewlett Packard Enterprise that ensures that applications continue to run throughout hybrid cloud environments. A security vulnerability exists in Hewlett Packard Enterprise Nimble Storage systems, whi...
Mitsubishi Electric FA Engineering Software (Update C)
1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GX Works3, MX OPC UA Module Configurator-R Vulnerabilities: Cleartext Storage of Sensitive Information, Use of Hard-coded Password, Insufficiently Protected Credentials,...
tokenID that is not minted will be stored into the feeRecipient storage
Lines of code Vulnerability details Impact In the original code, tokenID is incremented just after mint function is executed. Afterwards, tokenID is stored into the feeRecipient storage. As a result, tokenID that is not minted will be stored into the feeRecipient storage. Proof of Concept In the...
The vulnerability of Google Chrome’s storage mechanism allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Google Chrome’s storage mechanism is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML page...
GLSA-202210-09 : Rust: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202210-09 Rust: Multiple Vulnerabilities - In the standard library in Rust before 1.50.0, readtoend does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow. CVE-2021-28875 - In t...
Simple Cold Storage Management System SQL注入漏洞
Sourcecodester Simple Cold Storage Management System is a web-based application used as a cold storage business website to provide their customers or prospects with an easily accessible platform to learn about their company. A SQL injection vulnerability exists in Simple Cold Storage Management...
DEBIAN-CVE-2022-3195
Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...