51 matches found
PT-2025-27567
Name of the Vulnerable Software and Affected Versions: YONO SBI: Banking & Lifestyle version 1.23.36 Description: The issue is related to the use of unencrypted communications, which could potentially allow attackers to execute a man-in-the-middle attack. Recommendations: For YONO SBI: Banking &...
CVE-2021-3792
Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communication channel being accessible by an attacker...
CVE-2019-19127
An authentication bypass vulnerability is present in the standalone SITS:Vision 9.7.0 component of Tribal SITS in its default configuration, related to unencrypted communications sent by the client each time it is launched. This occurs because the Uniface TLS Driver is not enabled by default. Thi...
Toshiba e-STUDIO Security Vulnerability
Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba Japan. A security vulnerability exists in Toshiba e-STUDIO, which arises from unencrypted communication between portions of programs within the multifunction device, so that information could be stolen by a third...
Comarch ERP XL Security Vulnerability
Comarch ERP XL is an enterprise resource planning ERP software from Comarch Poland. A security vulnerability exists in Comarch ERP XL versions 2020.2.2 through 2023.2, which stems from susceptibility to server-side MS SQL protocol downgrade requests and may result in unencrypted communications th...
Security Bulletin: IBM Tivoli Directory Server use of NULL ciphers in default Transport Layer Security configuration would result in unencrypted communications (CVE-2012-0726)
Abstract IBM Tivoli Directory Server TDS enables NULL-MD5 and NULL-SHA ciphers in the default Transport Layer Security TLS configuration. Use of either of these ciphers would result in unencrypted communications. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-0726 DESCRIPTION: In the default TDS...
Dell Emc Streaming Data Platform 安全漏洞
Dell Emc Streaming Data Platform is a platform for ingesting, storing and analyzing continuous streaming data in real time from Dell USA. communication to an unencrypted format...
CVE-2021-3792
Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communication channel being accessible by an attacker...
CVE-2021-3792
Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communication channel being accessible by an attacker...
Hardcoded credentials
Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communication channel being accessible by an attacker...
CVE-2021-3792
Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communication channel being accessible by an attacker...
CVE-2021-3792
CVE-2021-3792 affects some Motorola-branded Binatone Hubble Cameras with backend Hubble services. The root cause is that certain device communications are not encrypted, allowing an attacker to access the communication channel. The connected sources confirm the issue but do not provide specific v...
Binatone Motorola-branded Camera 安全漏洞
The Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded product camera from Binatone, Inc. A security vulnerability exists in the Binatone Motorola-branded Camera, which stems from the fact that some device communications are not encrypted and could be exploited by an attacke...
Panasonic Video Insight VMS vulnerable to arbitrary code execution
Overview Video Insight VMS provided by Panasonic Corporation contains an arbitrary code execution vulnerability CWE-94 because unencrypted communication exists in the communication using non-well known ports. Panasonic Corporation reported this vulnerability to JPCERT/CC to notify users of its...
SITS:Vision 9.7.0 Authentication Bypass Vulnerability
An authentication bypass vulnerability is present in the stand-alone SITS:Vision component of Tribal SITS in its default configuration, related to unencrypted communications sent by the client each time it is launched. This vulnerability allows unauthenticated attackers to gain access to...
CVE-2019-19127
An authentication bypass vulnerability is present in the standalone SITS:Vision 9.7.0 component of Tribal SITS in its default configuration, related to unencrypted communications sent by the client each time it is launched. This occurs because the Uniface TLS Driver is not enabled by default. Thi...
Authentication flaw
An authentication bypass vulnerability is present in the standalone SITS:Vision 9.7.0 component of Tribal SITS in its default configuration, related to unencrypted communications sent by the client each time it is launched. This occurs because the Uniface TLS Driver is not enabled by default. Thi...
CVE-2019-19127
An authentication bypass vulnerability is present in the standalone SITS:Vision 9.7.0 component of Tribal SITS in its default configuration, related to unencrypted communications sent by the client each time it is launched. This occurs because the Uniface TLS Driver is not enabled by default. Thi...
Machine-In-The-Middle
Overview Versions of https-proxy-agent prior to 2.2.3 are vulnerable to Machine-In-The-Middle. The package fails to enforce TLS on the socket if the proxy server responds the to the request with a HTTP status different than 200. This allows an attacker with access to the proxy server to intercept...