Lucene search
+L

5479 matches found

Prion
Prion
added 2023/10/19 12:15 a.m.31 views

Design/Logic Flaw

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests...

6.4CVSS8.2AI score0.00245EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/19 12:00 a.m.14 views

DEXMA DexGate Security Vulnerability

The Dexma DEXGate is a device from Dexma. A security vulnerability exists in the DEXMA DexGate version 20130114, which stems from an issue with the clear text transmission of sensitive information, allowing an attacker to access the DexGate server to capture traffic...

6.5CVSS6.7AI score0.00241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/19 12:00 a.m.13 views

PT-2023-27777 · Dexgate · Dexgate

Name of the Vulnerable Software and Affected Versions: DexGate affected versions not specified Description: The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability. This may allow an attacker with access to the network, where clients have access to th...

6.5CVSS6.2AI score0.00241EPSS
SaveExploits0References6
CVE
CVE
added 2023/10/18 11:22 p.m.52 views

CVE-2023-34441

The CVE-2023-34441 vulnerability affects Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05. It involves cleartext transmission of authentication secrets used with the device, allowing an attacker to steal the authentication secret from communication traffic and reuse it for arbit...

8.2CVSS7.5AI score0.00245EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/18 11:22 p.m.21 views

CVE-2023-34441 Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests...

6.8CVSS7.2AI score0.00245EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/18 11:22 p.m.35 views

CVE-2023-34441 Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests...

6.8CVSS8.5AI score0.00245EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/18 12:00 a.m.14 views

The vulnerability of the Suricata intrusion detection and prevention system, related to the occurrence of interpretation conflicts, allows an intruder to bypass or neutralize any signature based on the TCP protocol.

The vulnerability of the Suricata intrusion detection and prevention system is related to the occurrence of interpretation conflicts. Exploiting this vulnerability allows a remote attacker to bypass or neutralize any TCP-based signature, by intercepting the TCP segment...

10CVSS7.7AI score0.02521EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/18 12:00 a.m.14 views

The vulnerability of the Suricata intrusion detection and prevention system, related to incorrect validation of the integrity check value, allows an intruder to bypass or neutralize any signature based on the TCP protocol.

The vulnerability of the Suricata intrusion detection and prevention system is related to incorrect validation of the integrity check value. Exploiting this vulnerability allows a malicious actor to bypass or neutralize any signature based on the TCP protocol...

10CVSS7.2AI score0.01724EPSS
SaveExploits0References7Affected Software2
OSV
OSV
added 2023/10/17 2:15 a.m.12 views

CVE-2022-22385

IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmission of data in clear text. IBM X-Force ID: 221962...

7.5CVSS5.7AI score0.00406EPSS
SaveExploits0References2
Prion
Prion
added 2023/10/17 2:15 a.m.27 views

Code injection

IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmission of data in clear text. IBM X-Force ID: 221962...

5CVSS7.2AI score0.00406EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/17 1:11 a.m.28 views

CVE-2022-22385 IBM Security Verify Privilege information disclosure

IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmission of data in clear text. IBM X-Force ID: 221962...

5.9CVSS5.9AI score0.00406EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/10/17 1:11 a.m.38 views

CVE-2022-22385 IBM Security Verify Privilege information disclosure

IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmission of data in clear text. IBM X-Force ID: 221962...

5.9CVSS7AI score0.00406EPSS
SaveExploits0References2
CVE
CVE
added 2023/10/17 1:11 a.m.89 views

CVE-2022-22385

The CVE-2022-22385 issue affects IBM Security Verify Privilege On-Premises 11.5, where sensitive information can be disclosed due to data being transmitted in clear text. The vulnerability concerns the confidentiality of data in transit and is tied to IBM’s On-Premises Privilege Manager. Remediat...

7.5CVSS5.8AI score0.00406EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:00 a.m.18 views

The vulnerability of the TCP/IP protocol implementation in the Windows operating system allows a hacker to cause a service failure.

The vulnerability of the TCP/IP protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.02314EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/17 12:00 a.m.9 views

IBM Security Verify Privilege Manager Security Vulnerability

IBM Security Verify Privilege Manager is a security management software from International Business Machines IBM for endpoint privilege management and application control in corporate environments. The software stops unintentional downloads of malware and ransomware from attacking applications by...

7.5CVSS6.2AI score0.00406EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:00 a.m.15 views

The vulnerability of the Suricata intrusion detection and prevention system arises from the operation going beyond the buffer boundaries in memory. This allows attackers to circumvent security restrictions and execute the TCP Reset attack.

The vulnerability of the Suricata intrusion detection and prevention system lies in the fact that the operation escapes the buffer in memory due to insufficient checking of the values of the FIN, SYN, and ACK parameters during packet processing. Exploiting this vulnerability allows a remote...

10CVSS8.1AI score0.01603EPSS
SaveExploits0References6Affected Software2
Positive Technologies
Positive Technologies
added 2023/10/16 12:00 a.m.11 views

PT-2023-12694 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: The issue could disclose sensitive information to an attacker due to the transmission of data in clear text. Recommendations: For IBM Security Verify Privilege On-Premises...

7.5CVSS7.1AI score0.00406EPSS
SaveExploits0References5
OSV
OSV
added 2023/10/15 7:15 p.m.37 views

CVE-2018-25091

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect i.e., a redirect that differs in host, port, or scheme. This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this...

6.1CVSS9.8AI score
SaveExploits0References3
OSV
OSV
added 2023/10/15 1:15 a.m.4 views

DEBIAN-CVE-2023-45871

An issue was discovered in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU...

7.5CVSS6.7AI score0.00544EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/15 12:00 a.m.7 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 6.5.3, which stems from a buffer size that may be insufficient for frames larger than the MTU...

7.5CVSS6.6AI score0.00544EPSS
SaveExploits0References11
Rows per page
Query Builder