Lucene search
+L

5773 matches found

Cvelist
Cvelist
added 2024/12/18 11:36 a.m.28 views

CVE-2024-4995 Protocol Downgrade in Wapro ERP Desktop

Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects Wapro ERP Desktop versions before 9.00.0...

9.1CVSS0.0093EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/18 11:36 a.m.49 views

CVE-2024-4995

CVE-2024-4995 (Wapro ERP Desktop) is publicly described as a server-side MS SQL protocol downgrade vulnerability affecting Wapro ERP Desktop before 9.00.0. The issue enables unencrypted communication between components, which may allow data interception and modification. Public records do not spe...

9.8CVSS7AI score0.0093EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/18 11:36 a.m.7 views

CVE-2024-4995 Protocol Downgrade in Wapro ERP Desktop

Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects Wapro ERP Desktop versions before 9.00.0...

9.1CVSS7.7AI score0.0093EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.14 views

PT-2024-33792

Name of the Vulnerable Software and Affected Versions: Wapro ERP Desktop versions prior to 9.00.0 Description: The issue affects Wapro ERP Desktop, where it is vulnerable to MS SQL protocol downgrade requests from the server side. This could lead to unencrypted communication, making it vulnerable...

9.8CVSS9.2AI score0.0093EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2024/12/18 12:0 a.m.11 views

The vulnerability of the IBM Tivoli Workload Scheduler software lies in the fact that it stores passwords in an unencrypted form, allowing a malicious individual to exploit this to disclose protected information.

The vulnerability of the IBM Tivoli Workload Scheduler software lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow a hacker to disclose the protected information...

5.5CVSS5.4AI score0.00146EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.7 views

Asseco Business Solutions Wapro ERP 安全漏洞

Asseco Business Solutions Wapro ERP is an enterprise-oriented ERP software from Asseco Business Solutions, Poland. A security vulnerability exists in Asseco Business Solutions Wapro ERP versions prior to 9.00.0, which stems from vulnerability to server-side MS SQL protocol downgrade requests, whi...

9.8CVSS9.2AI score0.0093EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:0 a.m.15 views

The vulnerability in the web interface of the microprogramming software for TP-Link Archer C50 allows a intruder to gain unauthorized access to the credentials of the target Wi-Fi system.

The vulnerability of the web-based management interface for TP-Link Archer C50 wireless routers involves the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the credentials of the target Wi-Fi system...

4.8CVSS5.5AI score0.00153EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2024/12/11 12:0 a.m.14 views

Siemens SICAM A8000 CP-8031 and CP-8050 Firmware Decryption Vulnerability

The SICAM A8000 RTU Remote Terminal Unit is a modular device for remote control and automation applications in all areas of energy supply. A firmware decryption vulnerability exists in the Siemens SICAM A8000 CP-8031 and CP-8050 due to the fact that the affected devices contain a secure element...

5.1CVSS7.4AI score0.00292EPSS
SaveExploits1References1
NVD
NVD
added 2024/12/10 2:30 p.m.18 views

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

5.1CVSS0.00292EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/12/10 1:54 p.m.8 views

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

5.1CVSS6.8AI score0.00292EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/12/10 1:54 p.m.19 views

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

5.1CVSS0.00292EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/12/10 12:0 a.m.8 views

PT-2024-35944 · Unknown · Cpci85 Central Processing/Communication

Name of the Vulnerable Software and Affected Versions: CPCI85 Central Processing/Communication versions prior to V05.30 Description: A vulnerability has been identified in the CPCI85 Central Processing/Communication devices. The affected devices contain a secure element connected via an unencrypt...

5.1CVSS6.7AI score0.00292EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.10 views

Siemens CPCI85 Central Processing 安全漏洞

The SICAM A8000 RTU Remote Terminal Unit is a modular device for remote control and automation applications in all areas of energy supply. A firmware decryption vulnerability exists in the Siemens SICAM A8000 CP-8031 and CP-8050 due to the fact that the affected devices contain a secure element...

5.1CVSS7.2AI score0.00292EPSS
SaveExploits1References1
NVD
NVD
added 2024/12/09 3:15 a.m.22 views

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

5.7CVSS0.00126EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.7 views

Oxide 安全漏洞

Oxide is a cloud platform from Oxide, Inc. A security vulnerability exists in versions prior to Oxide 6 that stems from having unencrypted control plane data storage...

5.7CVSS6.7AI score0.00126EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 12:0 a.m.17 views

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

5.7CVSS0.00126EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 12:0 a.m.10 views

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

5.7CVSS5.6AI score0.00126EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 12:0 a.m.62 views

CVE-2024-55582

CVE-2024-55582 affects Oxide prior to version 6, where the control plane datastores are unencrypted. Root cause: storage of control plane data without encryption. Impact (per sources): potential exposure or modification of sensitive control-plane information, reflected in the CVSS vector (high co...

5.7CVSS5.6AI score0.00126EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/06 12:0 a.m.11 views

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the storage of sensitive information in unencrypted form, allowing attackers to gain access to confidential data.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the storage of passwords in an unencrypted form during session data. Exploiting this vulnerability can allow attackers to gain access to confidential information...

1.8CVSS5.5AI score0.00338EPSS
SaveExploits0References5Affected Software3
Positive Technologies
Positive Technologies
added 2024/12/05 12:0 a.m.10 views

PT-2024-9343 · Tp Link · Tp-Link Archer C50

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C50 affected versions not specified Description: The issue is related to the storage of critical information in an unencrypted manner in the web interface of the TP-Link Archer C50 Wi-Fi router. This could allow an attacker to...

4.2CVSS6.8AI score0.00153EPSS
SaveExploits0References7
Rows per page
Query Builder