Mozilla: Push notifications saved to disk unencrypted

The Mozilla Foundation Security Advisory describes this flaw as: Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information...

Mozilla: Push notifications saved to disk unencrypted

The Mozilla Foundation Security Advisory describes this flaw as: Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information...

The vulnerability of the Moby container platform lies in the lack of encryption for confidential data and improper handling of exclusive conditions, allowing attackers to obtain confidential information.

The vulnerability of the Moby container platform lies in the absence of encrypted confidential data in the overlay network driver. Exploiting this vulnerability allows a remote attacker to obtain confidential information by sending a specially crafted request and use this information to launch...

CVE-2020-1749 - A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...

WakaTime: Waketime Payment Gateway Vulnerability

Vulnerability description not provided...

The vulnerability of the cross-platform software development framework Qt, related to the transmission of protected information in unencrypted form, allows attackers to compromise data integrity.

The vulnerability of the cross-platform software development framework Qt is related to the transfer of protected information in unencrypted form. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the TCP/IP communication protocol implementation in the development environment for programmable logic controllers ISaGRAF Workbench allows a attacker to upload, read, and delete files.

The vulnerability of the TCP/IP communication protocol implementation in the development environment for programmable logic controllers ISaGRAF Workbench relates to the transmission of data in an unencrypted form. Exploiting this vulnerability allows a malicious actor to upload, read, and delete...

CVE-2023-32982

CVE-2023-32982 affects the Jenkins Ansible Plugin (versions including 204.v8191fd551eb_f and earlier). The underlying issue is that extra variables passed to Ansible were stored unencrypted in job config.xml on the Jenkins controller, allowing visibility to users with Item/Extended Read permissio...

PT-2023-3010 · Unknown · Conprosys Hmi System

Name of the Vulnerable Software and Affected Versions: CONPROSYS HMI System CHS versions prior to 3.5.3 Description: The issue concerns the storage of passwords in plaintext within the CONPROSYS HMI System. Specifically, account information for the database is saved in a local file without...

The vulnerability of the wifi_ap_pata_get.cmd component of the P5E GNSS satellite receiver’s microprogramming software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the wifiappataget.cmd component of the P5E GNSS satellite receiver’s microprogramming system is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the...

Vulnerability of performance optimization and security systems: Dell SupportAssist for Home PCs and Dell SupportAssist for Business PCs have a vulnerability related to unencrypted storage of critical information, allowing unauthorized access to protected data by attackers.

The vulnerability of performance optimization and security systems in Dell SupportAssist for Home PCs and Dell SupportAssist for Business PCs lies in the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected...

The vulnerabilities of distributed control systems such as CENTUM CS 1000, CENTUM CS 3000, CENTUM CS 3000 Entry Class, CENTUM VP, and CENTUM VP Entry Class, B/M9000CS, B/M9000 VP, and the OPC-server Exaopc are related to the unencrypted storage of account data. This allows attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerabilities of distributed control systems such as CENTUM CS 1000, CENTUM CS 3000, CENTUM CS 3000 Entry Class, CENTUM VP, and CENTUM VP Entry Class, B/M9000CS, B/M9000 VP, and the OPC-server Exaopc are related to unencrypted storage of account data. Exploiting these vulnerabilities can...

CVE-2023-28841

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

PUB-A-269657712

In TBD of TBD, there is a possible way to send unencrypted data via a unexpected interface due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

K31523465: BIG-IP TMM vulnerability CVE-2022-41983

Security Advisory Description While Intel QAT QuickAssist Technology and the AES-GCM/CCM cipher is in use, undisclosed conditions cause the BIG-IP system to send data unencrypted, even with an SSL profile applied. CVE-2022-41983 Impact This vulnerability may expose confidential information to a...

SUSE CVE-2017-3737

OpenSSL 1.0.2 starting from version 1.0.2b introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the...

SUSE CVE-2018-12383

If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Firefox 58. The new master password is...

SUSE CVE-2019-10099

Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk controlled by spark.maxRemoteBlockSizeFetchToMem; in SparkR, using parallelize; in Pyspark, using...

SUSE CVE-2020-10685

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble, script, unarchiv...

SUSE CVE-2020-12398

If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection. This vulnerability affects Thunderbird 68.9.0...