The vulnerability of the SCADA system PcVue, related to unencrypted storage of account data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system PcVue is related to the unencrypted storage of account data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Huawei HarmonyOS and EMUI Information Disclosure Vulnerability (CNVD-2023-88962)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI have an information disclosu...

Huawei HarmonyOS 信息泄露漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI have an information disclosu...

The vulnerability of the Zoom video conferencing service, related to the unencrypted storage of critical information, allows attackers to gain access to protected data.

The vulnerability of the Zoom video conferencing service is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to gain access to protected data...

The vulnerability of the mstlsapi.dll library in the Remote Desktop Services (RDS) operating system allows a hacker to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of the mstlsapi.dll library in the Remote Desktop Services RDS operating system of Windows involves unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to carry out a “man-in-the-middle” attack...

The vulnerability of the Kafka platform’s message and section management package for security organization, automation, and Cortex XSOAR responses lies in the unencrypted storage of key certificates, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Kafka platform’s message and section management package for security organization, automation, and Cortex XSOAR response is related to the unencrypted storage of key certificates. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in the unencrypted storage of critical information, allowing attackers to gain unauthorized access to the protected data.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the FortiTester software and hardware tools for diagnosing and auditing computer networks lies in the unencrypted storage of confidential information, which allows attackers to gain unauthorized access to protected data.

The vulnerability of the FortiTester software for diagnosing and auditing computer networks lies in the unencrypted storage of confidential information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected information...

The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, arises from the unencrypted storage of critical information, allowing a hacker to expose user credentials.

The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to obtain user credentials...

Mozilla: Push notifications saved to disk unencrypted

The Mozilla Foundation Security Advisory describes this flaw as: Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information...

Mozilla: Push notifications saved to disk unencrypted

The Mozilla Foundation Security Advisory describes this flaw as: Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information...

Mozilla: Push notifications saved to disk unencrypted

The Mozilla Foundation Security Advisory describes this flaw as: Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information...

SUSE CVE-2023-4580

Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2...

UBUNTU-CVE-2023-4580

Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2...

CVE-2023-39954 user_oidc app stores client secret unencrypted in database

useroidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, an attacker that obtained at least read access to a snapshot of the database can impersonate the Nextcloud server towards linked servers. useroidc...

Canon PIXMA TR4550 1.020 / 1.080 Unencrypted Secret Storage

Advisory ID: SYSS-2023-011 Product: PIXMA TR4550 Manufacturer: Canon Affected Versions: 1.020 / 1.080 also affects many other Canon inkjet printer models4 Tested Versions: 1.020 / 1.080 Vulnerability Type: Insufficient or Incomplete Data Removal within Hardware Component CWE-1301 Insufficiently...

The vulnerability of the Teacher Console and Student Console components of the Faronics Insight computer network management platform allows a attacker to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of the Teacher Console and Student Console components of the Faronics Insight computer network management platform is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle”...

The vulnerability of the GeoServices application for operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows attackers to disclose sensitive information that is protected by this application’s security measures.

The vulnerability of the GeoServices application for operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker to disclose the protected information...

PT-2023-2896 · Apple · Ipados +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 iOS versions prior to 16.5 iPadOS versions prior to 16.5 Description...

Design/Logic Flaw

Jenkins Code Dx Plugin 3.1.0 and earlier stores Code Dx server API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...