Lucene search
+L

6789 matches found

Positive Technologies
Positive Technologies
•added 2022/09/13 12:00 a.m.•21 views

PT-2022-5069 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS versions prior to 8.2.3c Brocade Fabric OS versions prior to 7.4.2j Description: The issue is related to the storage of critical informatio...

6.5CVSS6.3AI score0.00213EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2022/09/12 12:00 a.m.•27 views

Kubernetes Rancher Privilege Escalation

The vulnerability of Kubernets Rancher cluster management software is related to the unencrypted storage of user credentials. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

9.9CVSS7.8AI score0.04171EPSS
SaveExploits3References2Affected Software1
NVD
NVD
•added 2022/09/09 3:15 p.m.•40 views

CVE-2022-26390

The Baxter Spectrum Wireless Battery Module WBM stores network credentials and PHI only applicable to Spectrum IQ pumps using auto programming in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive informatio...

4.2CVSS0.00474EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/09/09 3:15 p.m.•23 views

CVE-2022-26390

The Baxter Spectrum Wireless Battery Module WBM stores network credentials and PHI only applicable to Spectrum IQ pumps using auto programming in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive informatio...

4.2CVSS5.8AI score0.00474EPSS
SaveExploits0References2
Prion
Prion
•added 2022/09/09 3:15 p.m.•42 views

Information disclosure

The Baxter Spectrum Wireless Battery Module WBM stores network credentials and PHI only applicable to Spectrum IQ pumps using auto programming in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive informatio...

1.2CVSS5.2AI score0.00474EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/09/09 2:40 p.m.•49 views

CVE-2022-26390 Unencrypted internal storage of security credentials

The Baxter Spectrum Wireless Battery Module WBM stores network credentials and PHI only applicable to Spectrum IQ pumps using auto programming in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive informatio...

4.2CVSS4.5AI score0.00474EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/09 2:40 p.m.•95 views

CVE-2022-26390

CVE-2022-26390 affects Baxter SIGMA Spectrum/Spectrum/WBM: Wireless Battery Module versions (e.g., v16, v16D38, v17, v17D19, v20D29–v20D32, v22D19–v22D28) where network credentials and PHI stored in unencrypted form on the WBM. Exploitation requires physical access to a device that hasn’t had dat...

4.2CVSS4.5AI score0.00474EPSS
SaveExploits0References2Affected Software1
Huntr
Huntr
•added 2022/09/09 6:57 a.m.•25 views

Session_id without Secure attribute

Description User's session id with secure attribute is false. This vulnerability makes user's cookies can be sent to the server with an unencrypted request over the HTTP protocol. Proof of Concept Open the browser and access to the website, in this scenario I use the demo website. Check the cooki...

5CVSS1AI score0.00706EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2022/09/09 12:00 a.m.•25 views

Kubernetes Rancher Password Storage

The vulnerability of Kubernets Rancher cluster management software is related to the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a remote attacker to gain access to credentials, passwords, and API tokens...

10CVSS7.8AI score0.00779EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/09 12:00 a.m.•23 views

PT-2022-17823 · Baxter · Baxter Spectrum Wireless Battery Module

Name of the Vulnerable Software and Affected Versions: Baxter Spectrum Wireless Battery Module WBM affected versions not specified Description: The issue concerns the storage of network credentials and Protected Health Information PHI in unencrypted form, specifically applicable to Spectrum IQ...

4.2CVSS5.1AI score0.00474EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/09 12:00 a.m.•7 views

CVE-2022-26390: Missing Encryption of Sensitive Data

The Baxter Spectrum Wireless Battery Module WBM stores network credentials and PHI only applicable to Spectrum IQ pumps using auto programming in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive informatio...

4.2CVSS6.5AI score0.00474EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/09/08 10:03 p.m.•10 views

CVE-2022-26390

The Baxter Spectrum Wireless Battery Module WBM stores network credentials and PHI only applicable to Spectrum IQ pumps using auto programming in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive informatio...

4.2CVSS5.8AI score0.00474EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/09/08 12:00 a.m.•22 views

Baxter Spectrum 安全漏洞

Baxter Spectrum is an infusion pump from Baxter USA. The Baxter Sigma and Baxter Spectrum Infusion Pumps have a security vulnerability that stems from the fact that they store network credentials and patient health information PHI in unencrypted form.PHI is stored using an automated program only ...

4.2CVSS6.7AI score0.00474EPSS
SaveExploits0References4
NVD
NVD
•added 2022/09/02 12:15 p.m.•31 views

CVE-2022-22069

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

7.8CVSS0.00096EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/09/02 12:15 p.m.•12 views

CVE-2022-22069

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

7.8CVSS7.1AI score0.00096EPSS
SaveExploits0References2
Prion
Prion
•added 2022/09/02 12:15 p.m.•37 views

Design/Logic Flaw

Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

4.3CVSS7.7AI score0.00096EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/09/02 12:00 a.m.•25 views

PT-2022-15218 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue affects devices with keyprotect off, which may store an unencrypted keybox in RPMB, causing a cryptographic issue. This problem is present in various Snapdragon...

7.8CVSS7.6AI score0.00096EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/09/01 9:15 p.m.•20 views

CVE-2022-2663

An issue was found in the Linux kernel in nfconntrackirc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nfconntrackirc configured...

5.3CVSS7.3AI score
SaveExploits0References7
attackerkb
attackerkb
•added 2022/09/01 9:15 p.m.•12 views

CVE-2022-2663

An issue was found in the Linux kernel in nfconntrackirc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nfconntrackirc configured...

5.3CVSS6.6AI score0.03813EPSS
SaveExploits1References9
osv_ubuntu
osv_ubuntu
•added 2022/09/01 9:15 p.m.•15 views

UBUNTU-CVE-2022-2663

An issue was found in the Linux kernel in nfconntrackirc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nfconntrackirc configured...

5.3CVSS6.6AI score0.03813EPSS
SaveExploits1References28
Rows per page
Query Builder