329 matches found
CVE-2024-53292
Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper. A local high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed...
CVE-2024-53292
Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper. A local high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed...
Exploit for CVE-2024-48217
CVE-2024-48217 Sismart Vulnerability ---------------------------...
The vulnerability of the Storage component in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Storage component in Windows operating systems is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2024-7949 · Red Hat +6 · Buildah +10
Name of the Vulnerable Software and Affected Versions: Podman, Buildah, and CRI-O affected versions not specified Description: A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when runni...
CVE-2024-43551
Windows Storage Elevation of Privilege Vulnerability...
The vulnerability of the CORS mechanism implementation in Python PyPi storage solutions allows attackers to disclose protected information.
The vulnerability of the CORS mechanism implemented in Python PyPi software repositories is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...
Relative Path Traversal
@backstage/plugin-techdocs-backend is vulnerable to Relative Path Traversal. The vulnerability is caused due to improper validation of file paths, allowing unauthorized access to files in the AWS S3 or GCS storage provider...
TopQuadrant TopBraid EDG Insecure External Password Storage and XXE Vulnerabilities
RISK EVALUATION TopQuadrant TopBraid EDG stores credentials for external services insecurely and processes untrusted XML entities. An authenticated attacker could obtain credentials for remote services, read local files, or access URLs. 2. RECOMMENDED PRACTICES Upgrade to TopQuadrant TopBraid...
PT-2024-41075 · Ооо 'Нпо Мир' · Конфигуратор Контроллеров Мир +2
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to the storage of unencrypted account credentials. Exploitation of this issue could allow an attacker to disclose protected information. Recommendations: At the moment,...
The vulnerability of the QNAP TS-X41 network storage device, due to lack of access control, allows a intruder to execute arbitrary code within the system.
The vulnerability of the QNAP TS-X41 network storage device is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code within the system remotely...
CVE-2024-39918
CVE-2024-39918 affects @jmondi/url-to-png. The root cause is lack of sanitization in the ImageId input (extract_query_params.ts), enabling path traversal that lets an attacker store a generated PNG in arbitrary server-accessible locations. Public disclosures across NVD/Red Hat/OSV/Veracode indica...
CVE-2022-38383
IBM Cloud Pak for Security CP4S 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673...
CVE-2024-30093
Windows Storage Elevation of Privilege Vulnerability...
CVE-2024-4232 Password Storage in Plaintext Vulnerability in Digisol Router
This vulnerability exists in Digisol Router DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02 due to lack of encryption or hashing in storing of passwords within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse...
HDF Group HDF5 安全漏洞
HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 Library version 1.14.3...
CVE-2024-28971
Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log file. A remote high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the...
CVE-2024-28971
The CVE-2024-28971 entry corresponds to Dell Update Manager Plugin versions 1.4.0–1.5.0, with a plain-text password storage vulnerability in the log file that could lead to disclosure of user credentials. Multiple connected sources confirm the issue and potential credential exposure; exploitation...
The vulnerability of the QTS and QuTS operating systems’ network storage solutions from QNAP allows a hacker to execute arbitrary code.
The vulnerability of QTS and QuTS network storage systems from QNAP lies in the fact that the operation occurs outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...