5456 matches found
Samsung Mobile Device Resource Management Error Vulnerability
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A resource management error vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to cause a denial of service with the help of TCP SYN packets...
PT-2020-2653 · Jenkins · Jenkins Artifactory Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins Artifactory Plugin versions 3.6.0 and earlier Description: The issue is related to the transmission of configured passwords in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure. This...
CVE-2020-6997
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext...
CVE-2020-6997
The CVE-2020-6997 entry concerns Moxa EDS-G516E (and related EDS-510E) Ethernet switches. In firmware v5.2 or lower, sensitive information is transmitted over some web applications in cleartext. This can expose confidential data via network interfaces that handle management/web traffic. The entry...
CVE-2020-6997
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext...
Design/Logic Flaw
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text...
Security Bulletin: IBM Integration Bus is affected by Web UI security vulnerability (CVE-2017-1694)
Summary IBM Integration Bus has addressed the following vulnerability Vulnerability Details CVEID: CVE-2017-1694 DESCRIPTION: IBM Integration Bus transmits user credentials in plain in clear text which can be read by an attacker using man in the middle techniques. CVSS Base Score: 5.9 CVSS Tempor...
CVE-2019-16067
NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over cleartext protocols can allow an attacker to steal username and password combinations by intercepting authentication...
Mitsubishi Electric MELQIC IU1 TCP Function Access Control Error Vulnerability
The Mitsubishi Electric MELQIC IU1 is an IU1 series data collection analyzer from Mitsubishi Electric Mitsubishi, Japan. An access control error vulnerability exists in the TCP function in the Mitsubishi Electric MELQIC IU1 IU1-1M20-D using firmware version 1.0.7 and earlier. The vulnerability...
[SECURITY] Fedora 31 Update: ppp-2.4.7-34.fc31
The ppp package contains the PPP Point-to-Point Protocol daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an ISP Internet Service Provider or other organization over a modem...
CVE-2019-5107
A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e!Cockpit. This includes passwords,...
CVE-2019-5107
A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e!Cockpit. This includes passwords,...
Design/Logic Flaw
A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e!Cockpit. This includes passwords,...
CVE-2019-9101
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Sensitive information is sent to the web server in cleartext, which may allow an attacker to discover the credentials if they...
CVE-2019-5107
A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e!Cockpit. This includes passwords,...
CVE-2019-5107
CVE-2019-5107 affects WAGO e!Cockpit 1.5.1.1. TALOS details a network cleartext transmission vulnerability where data, including passwords and configurations, can be intercepted, interpreted, and manipulated over unencrypted network traffic between GatewayService and PLC devices. CVSSv3 score is ...
TLS handshake fails with any TLS LB VIP FIPS 9700 - Reset code 9811 from ADC
Cannot reach Netscaler Gateway Page FIPS Not able to form any TLS handshake with any LB VIP on ADC ADC sends REST with code :: 9811 Transmission Control Protocol, Src Port: 443, Dst Port: 62706, Seq: 4271, Ack: 860, Len: 0 Source Port: 443 Destination Port: 62706 Stream index: 0 TCP Segment Len: ...
Ex-CIA Accused of Leaking Secret Hacking Tools to WikiLeaks Gets Mistrial
A federal judge in New York on Monday declared a mistrial in the case of a former CIA software engineer who was accused of stealing a massive trove of the agency's classified hacking and tools and leaking it to WikiLeaks whistleblower website. While the jury was unable to reach a verdict on eight...