5479 matches found
PT-2023-5395 · Keycloak +1 · Keycloak
Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: The issue is related to the transmission of data in plain text, allowing a remote attacker to gain access to user credentials. When a user registers through the registration flow, the...
K000136153: cURL vulnerability CVE-2023-23914
Security Advisory Description A cleartext transmission of sensitive information vulnerability exists in curl. CVE-2023-23914 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently supported release...
Fujitsu Limited Real-time Video Transmission Gear "IP series"
1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Fujitsu Limited Equipment: Real-time Video Transmission Gear "IP series" Vulnerability: Use Of Hard-Coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker logging into...
CVE-2023-22870
IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID: 244121...
The vulnerability of the programmable logic controller PLC-100, related to errors in TCP communication processing, allows a intruder to trigger a service failure.
The vulnerability of the programmable logic controller PLC-100 is related to errors in TCP communication processing. Exploiting this vulnerability can allow a remote attacker to cause service failures...
PT-2023-21792 · Qualcomm · Snapdragon +184
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in WLAN when sending a transmit command from HLOS to UTF handlers. No information is provided about the estimated...
Digi RealPort 安全漏洞
Digi RealPort is a proprietary Serial-over-LAN encapsulation protocol. It provides virtual connectivity to serial devices anywhere on the network by encapsulating ICS protocol data in a TCP-based protocol. A security vulnerability exists in the Digi RealPort Protocol that stems from vulnerability...
The vulnerability of the QTS operating system’s network storage solutions on QNAP devices allows a perpetrator to gain unauthorized access to confidential data.
The vulnerability of the QTS operating system’s network storage devices in QNAP is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to confidential data...
kernel: buffer overflow in ceph file net/ceph/messenger_v2.c
An flaw was found in net/ceph/messengerv2.c in the Linux Kernel. An integer signing error leads to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This issue occurs due to an untrusted length taken from a TCP packet in cephdecode32...
PT-2023-5218 · Ibm · Ibm Aspera Faspex
Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex version 5.0.5 Description: The issue is related to the lack of protection for transmitted data in the application. This could allow a remote attacker to obtain sensitive information using man-in-the-middle techniques...
QNAP QTS / QuTS hero Information Disclosure (QSA-23-58)
The version of QNAP QTS / QuTS hero installed on the remote host is affected by an information disclosure vulnerability as referenced in the QSA-23-58 advisory. A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the...
CVE-2023-34972
A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the...
Design/Logic Flaw
A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the...
CVE-2023-34972
CVE-2023-34972 affects QNAP QTS and QuTS hero with a cleartext transmission vulnerability that could allow local network clients to read sensitive data. Affected products/versions (per sources): QTS 5.0.1.2425 build 20230609 and later; QTS 5.1.0.2444 build 20230629 and later; QuTS hero h5.1.0.242...
CVE-2023-34972 QTS, QuTS hero and QuTScloud
A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the...
PT-2023-4584 · Qnap · Qnap Qts +1
Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.0.1.2425 build 20230609 QNAP QTS versions prior to 5.1.0.2444 build 20230629 QNAP QuTS hero h5.1.0 versions prior to 2424 build 20230609 Description: A cleartext transmission of sensitive information issue has bee...
EuroTel ETL3100 Transmitter Default Credentials Vulnerability
EuroTel ETL3100 transmitters use a weak set of default administrative credentials that can be guessed in remote password attacks and gain full control of the system. EuroTel ETL3100 Transmitter Default Credentials Vendor: EuroTel S.p.A. | SIEL, Sistemi Elettronici S.R.L Product web page:...
CVE-2023-39086
ASUS RT-AC66U B1 3.0.0.4.28651665 was discovered to transmit sensitive information in cleartext...
