449 matches found
CVE-2023-50257
CVE-2023-50257 affects eProsima Fast DDS (Fast RTPS) with SROS2. The issue: RTPS Disconnect packets (p[UD]/guid) are not encrypted, enabling a malicious actor to forcibly disconnect a Subscriber and deny connections by sending disconnect packets to 239.255.0.1:7400 using the Publisher ID. Impact ...
PT-2024-13889
Name of the Vulnerable Software and Affected Versions eProsima Fast DDS versions prior to 2.13.0 eProsima Fast DDS versions prior to 2.12.2 eProsima Fast DDS versions prior to 2.11.3 eProsima Fast DDS versions prior to 2.10.3 eProsima Fast DDS versions prior to 2.6.7 Description A vulnerability h...
CVE-2023-4537
Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects ERP XL: from 2020.2.2 through 2023.2...
PYSEC-2024-32
The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. There are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a tas...
The vulnerability of cloud software for creating and using Nextcloud Server’s data storage system, related to the unencrypted storage of critical information, allows attackers to compromise the passwords of arbitrary users.
The vulnerability of cloud software for creating and using Nextcloud Server storage involves the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to disclose the passwords of arbitrary users...
CVE-2023-46447
The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE...
CVE-2023-46447
The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE...
The vulnerability of the H2 database management system’s web interface allows attackers to escalate their privileges.
The vulnerability of the H2.svz database management system’s web interface relates to the unencrypted storage of confidential information. Exploiting this vulnerability can allow attackers to enhance their privileges...
Code injection
The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture and modify network traffic...
EnBw SENEC Legacy Storage Box Security Vulnerability
The EnBw SENEC Legacy Storage Box is a series of storage boxes from German company EnBw. A security vulnerability exists in EnBw SENEC Legacy Storage Box versions V1, V2, and V3, which stems from the affected devices transmitting unencrypted sensitive information, and can be exploited by an...
The vulnerability of the param.file.tgz file of the Backup Handler component in the Netis Netcore microprogramming system allows a hacker to disclose protected information.
The vulnerability of the param.file.tgz file of the Backup Handler component in the Netis Netcore microprogramming system lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected information...
The vulnerability of the software for designing, operating, and maintaining COMOS technological installations lies in the transfer of accounting data in unencrypted form, allowing a perpetrator to gain access to configuration data.
The vulnerability of COMOS’ software for the design, operation, and maintenance of technological installations lies in the transfer of accounting data in an unencrypted form. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to configuration data...
The vulnerability of Acronis Cyber Protect 15’s data protection software lies in the unencrypted storage of critical information, allowing attackers to obtain confidential data.
The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information...
PT-2023-7788 · Nagios Xi · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the Inbound/Outbound Transfer function of the Nagios XI monitoring tool. It involves the unencrypted storage of critical information in the xi options database...
Information Disclosure
python3 is vulnerable to Information Disclosure. The vulnerability can be exploited by an attacker to bypass the TLS handshake and send unencrypted data to the server. This data could be used to modify or delete resources that are authenticated only by a TLS certificate, which makes it possible f...
Mozilla: Push notifications saved to disk unencrypted
The Mozilla Foundation Security Advisory describes this flaw as: Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information...
Mozilla: Push notifications saved to disk unencrypted
The Mozilla Foundation Security Advisory describes this flaw as: Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information...
The vulnerability of the Moby container platform lies in the lack of encryption for confidential data and improper handling of exclusive conditions, allowing attackers to obtain confidential information.
The vulnerability of the Moby container platform lies in the absence of encrypted confidential data in the overlay network driver. Exploiting this vulnerability allows a remote attacker to obtain confidential information by sending a specially crafted request and use this information to launch...
CVE-2020-1749 - A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...
