6783 matches found
RHEL 8 : krb5 (RHSA-2025:2722)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2722 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords...
CVE-2025-27594 Unencrypted transmission of password hash
The device uses an unencrypted, proprietary protocol for communication. Through this protocol, configuration data is transmitted and device authentication is performed. An attacker can thereby intercept the authentication hash and use it to log into the device using a pass-the-hash attack...
CVE-2025-27594
The CVE-2025-27594 entry concerns the SICK DL100-2xxxxxxx series where a proprietary protocol transmits configuration data and authenticates devices without encryption. The underlying issue is the unencrypted protocol, which can allow an attacker to intercept the authentication hash and perform a...
CVE-2025-27594 Unencrypted transmission of password hash
The device uses an unencrypted, proprietary protocol for communication. Through this protocol, configuration data is transmitted and device authentication is performed. An attacker can thereby intercept the authentication hash and use it to log into the device using a pass-the-hash attack...
SICK DL100-2xxxxxxx 安全漏洞
The SICK DL100-2xxxxxxxxx is a series of sensors from SICK, Germany. A security vulnerability exists in the SICK DL100-2xxxxxxxxx that stems from communication using an unencrypted proprietary protocol that could result in an authentication hash being intercepted and used to log in to the device...
PT-2025-11262
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns the use of an unencrypted, proprietary protocol for communication, which allows an attacker to intercept the authentication hash. This hash can then be used to log into th...
CVE-2025-0071
SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...
PT-2025-11058 · Google · Android
Name of the Vulnerable Software and Affected Versions: avdtp and avctp channels affected versions not specified Description: A logic error in the code may allow avdtp and avctp channels to be unencrypted. This could lead to local escalation of privilege, requiring User execution privileges. User...
CVE-2025-0071
SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...
CVE-2025-0071
SAP Web Dispatcher and SAP Internet Communication Manager contain a vulnerability where an attacker with administrative privileges can enable debugging trace mode via a specific parameter, leading to unencrypted passwords being written to logs. This affects confidentiality (C) with high impact, w...
CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager
SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...
CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager
SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...
PT-2025-10663
Name of the Vulnerable Software and Affected Versions SAP Web Dispatcher and Internet Communication Manager affected versions not specified Description The issue allows an attacker with administrative privileges to enable debugging trace mode with a specific parameter value, exposing unencrypted...
CVE-2025-0071: Insertion of Sensitive Information into Log File
SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...
CVE-2025-22493
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software FRS. Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100...
CVE-2025-22493
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software FRS. Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100...
CVE-2025-22493 Improper cookie attributes in Foreseer Reporting Software (FRS)
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software FRS. Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100...
PT-2025-9801
Name of the Vulnerable Software and Affected Versions Foreseer Reporting Software FRS versions prior to 1.5.100 Description The issue arises from the secure flag not being set and the SameSite attribute being set to Lax in the Foreseer Reporting Software. This could lead to the session cookie bei...
Linux Distros Unpatched Vulnerability : CVE-2020-25645
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt...
