6815 matches found
Mcafee Database Security Server Sensitive Information Plaintext Transfer Vulnerability
Mcafee Database Security Server is a database security software from Mcafee USA. The software provides users with a holistic view of the database and the corresponding security status, protecting business-critical databases from external, internal and insider database threats in real time. A...
‘Battle for the Galaxy’ Mobile Game Leaks 6M Gamer Profiles
An Elasticsearch server holding personal data of 6 million players of the popular mobile game Battle for the Galaxy was discovered insecure and containing over 1 terabyte of unencrypted data, meaning anyone with a link could access data stored on the repository. Ethical hackers WizCase found the...
Design/Logic Flaw
Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security DBSec prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to...
PT-2021-15598
Name of the Vulnerable Software and Affected Versions: McAfee Database Security DBSec versions prior to 4.8.2 Description: The administrator interface of McAfee Database Security DBSec contains a Cleartext Transmission of Sensitive Information issue, allowing an administrator to view the...
Thunderbird OpenPGP Unencrypted Confidential Information
The vulnerability of the Thunderbird email client is related to the unencrypted storage of OpenPGP keys. Exploiting this vulnerability could allow an attacker to access confidential information...
Nginx controller security vulnerabilities
F5 NGINX Controller is a centralized monitoring and management platform for NGINX from F5. The platform supports the management of multiple NGINX instances using a visual interface. A security vulnerability exists in F5 NGINX Controller that stems from the fact that intra-cluster communication do...
UBUNTU-CVE-2021-29956
OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will...
CVE-2021-29956
OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will...
CVE-2018-16498
In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files. These credentials are for various application components such as SNMP, and SSL and Trust keystores...
Code injection
In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files. These credentials are for various application components such as SNMP, and SSL and Trust keystores...
CVE-2018-16498
CVE-2018-16498 affects Versa Director where unencrypted backup files stored on the Versa deployment include credentials inside configuration files for components such as SNMP and SSL/Trust keystores. The root cause is plaintext credentials in backups, enabling potential exposure if backups are ac...
PT-2021-8822
Name of the Vulnerable Software and Affected Versions Versa Director affected versions not specified Description The issue concerns unencrypted backup files stored on the Versa deployment, which contain credentials for various application components, including SNMP, SSL, and Trust keystores. Thes...
Versa Networks Versa Director security vulnerability
Versa Networks Versa Director is a virtualization and service creation platform from Versa Networks, USA. It simplifies the creation, automation and delivery of services using Versa FlexVNF. A security vulnerability exists in Versa Director that stems from an unencrypted backup file containing...
Unspecified vulnerability in Mathias Buus dns-packet
dns-packet is a software application. An abstraction encodes a dependency model for encoding/decoding DNS packets. A security vulnerability exists in Mathias Buus dns-packet versions prior to 5.2.2, which can be exploited by an attacker to expose internal application memory over an unencrypted...
Memory Exposure
Overview This affects the package dns-packet before versions 1.3.2 and 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names...
GHSA-3WCQ-X3MQ-6R9P Potential memory exposure in dns-packet
This affects the package dns-packet before versions 1.3.2 and 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names...
Linux WPA WPA2 WPA3 WEP Data Compromise
The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information by using specially crafted...
NPort IA5150A/IA5250A IA5450A Password Storage
The vulnerability of the serial interface converters NPort IA5150A/IA5250A, IA5450A lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Backdoor.Win32.Spion4 Insecure Transit
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/cb02d2f323db18d7415dca47bceab9db.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Spion4 Vulnerability: Insecure Transit Description: SPION 4 Server terminal listens o...
