17640 matches found
CVE-2022-34570
WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the key information via accessing the messages.txt page...
PT-2022-22209 · Wavlink · Wavlink Wn579X3
Name of the Vulnerable Software and Affected Versions: WAVLINK WN579 X3 version M79X3.V5030.191012 Description: The issue allows attackers to obtain key information by accessing the "messages.txt" page, resulting in an information leak. Recommendations: For version M79X3.V5030.191012, consider...
Fedora: Security Advisory for python-notebook (FEDORA-2022-85aa8e5706)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The January 6 Secret Service Text Scandal Turns Criminal
Plus: The FCC cracks down on car warranty robocalls, Thai activists get targeted by NSO's Pegasus, and the Russia-Ukraine cyberwar continues...
Citilog 安全漏洞
Citilog is a video analytics and artificial intelligence application for traffic management solutions from Citilog. A security vulnerability exists in Citilog version 8.0, which can be exploited by an attacker to view FTP credentials as plaintext HTTP traffic...
[SECURITY] Fedora 35 Update: golang-github-mbndr-figlet4go-0-0.8.20191009gitd6cef5b.fc35
figlet4go is a go library which is a port of FIGlet to Golang. With figlet4go it's easy to create ascii text banners in the command-line or with the given api...
PT-2022-14952 · Micodus · Micodus Mv720 Gps Tracker
Name of the Vulnerable Software and Affected Versions: MiCODUS MV720 GPS tracker affected versions not specified Description: The issue allows SMS-based GPS commands to be executed by the MiCODUS MV720 GPS tracker without requiring authentication. Recommendations: At the moment, there is no...
PT-2022-14860 · Micodus · Micodus Mv720
Name of the Vulnerable Software and Affected Versions: MiCODUS MV720 GPS tracker affected versions not specified Description: The MiCODUS MV720 GPS tracker API server has an authentication mechanism that allows devices to use a hard-coded master password. This may allow an attacker to send SMS...
CVE-2022-27544
BigFix Web Reports authorized users may see SMTP credentials in clear text...
CVE-2022-27544
CVE-2022-27544 affects HCL BigFix Platform (Web Reports): an information disclosure where authorized users can retrieve SMTP credentials in clear text. Root cause is the transfer of SMTP credentials in clear text within Web Reports. Affected product: HCL BigFix Platform/Web Reports. Impact: expos...
CVE-2022-27544 HCL BigFix Web Reports authorized users may see sensitive information in clear text
BigFix Web Reports authorized users may see SMTP credentials in clear text...
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Description The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session Proof of Concept PHPSESSID:"ID" Created:"Tue, 19 Jul 2022 13:15:32 GMT" Domain:"demo.pimcore.fun" Expires / Max-Age:"Sessio...
MiCODUS MV720 GPS 访问控制错误漏洞
The MiCODUS MV720 GPS is a GPS tracker from MiCODUS USA. An access control error vulnerability exists in the MiCODUS MV720 GPS that stems from SMS-based GPS commands that can be executed without authentication...
Dell Wyse Management Suite < 3.8 Multiple Vulnerabilities (DSA-2022-134)
The version of Dell Wyse Management Suite installed on the remote host is prior to 3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2022-134 advisory. - Wyse Management Suite 3.7 and earlier contains a Sensitive Data Exposure vulnerability. A low privileged...
CVE-2022-30626
Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...
CVE-2022-30626
Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...
Default credentials
Browsing the path: http://ip/wifiappataget.cmd, will show in the name of the existing access point on the component, and a password in clear text...
CVE-2022-30626
CVE-2022-30626 affects Chcnav P5E GNSS API. The vulnerability arises when browsing the path http://ip/wifi_ap_pata_get.cmd, which causes the name of the existing access point and a password to be shown in clear text. Documented in NVD/NVD-derived entries, this results in password exposure but no ...
