6824 matches found
CVE-2020-2250: Missing Encryption of Sensitive Data
Jenkins SoapUI Pro Functional Testing Plugin 1.3 and earlier stores project passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by attackers with Extended Read permission, or access to the Jenkins controller file system...
IBM Spectrum Protect Information Disclosure Vulnerability (CNVD-2020-49927)
IBM Spectrum Protect formerly known as Tivoli Storage Manager is a suite of data protection platforms from IBM in the United States. The platform provides organizations with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of...
CVE-2020-15482
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network...
Default credentials
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network...
CVE-2020-15482
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network...
CVE-2020-15482
CVE-2020-15482 concerns Nescomed Multipara Monitor M1000 devices, where an unencrypted TELNET service is enabled by default with a blank admin password, enabling an attacker on the local network to gain root access. The available connected sources corroborate the issue across multiple references ...
MGASA-2020-0346 Updated kdepim-runtime and kmail-account-wizard packages fix security vulnerability
It was discovered that there was an issue where kmail would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use CVE-2020-15954...
CVE-2020-9062
Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting an...
Ransomware Hits Leading US Medical Debt Collector R1 RCM Inc.
By Waqas Previously, R1 RCM Inc., under different name had several incidents involving thefts of laptops containing unencrypted patient data. This is a post from HackRead.com Read the original post: Ransomware Hits Leading US Medical Debt Collector R1 RCM Inc...
UBUNTU-CVE-2020-17495
django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...
PT-2020-15025
Name of the Vulnerable Software and Affected Versions django-celery-results versions prior to 2.4.0 django-celery-results version 1.2.1 Description The issue concerns the storage of task results in the database, which may include sensitive cleartext information passed into tasks as variables. Thi...
DIGITUS DA-70254 Elevation of Privilege Vulnerability
The Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub is a Gigabit network hub from Assmann Electronic, Germany. A security vulnerability exists in the Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub version 2.073.000.E0008. An attacker can exploit this vulnerability b...
Lindy 42633 Elevation of Privilege Vulnerability
The Lindy 42633 is a 4-port USB 2.0 Gigabit network server. An elevation of privilege vulnerability exists in the Lindy 42633 2.078.000. The vulnerability stems from the ability to discover the administrative password by sniffing unencrypted UDP traffic. An attacker on the same network could use...
TP-Link TL-PS310U Elevation of Privilege Vulnerability
The TP-Link TL-PS310U is a single USB 2.0 port MFP and storage server. An elevation of privilege vulnerability exists in versions prior to TP-Link TL-PS310U 2.079.000.t0210, which stems from the ability to discover administrative passwords by sniffing unencrypted UDP traffic, and can be exploited...
CVE-2020-15058
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
CVE-2020-15062
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
CVE-2020-15054
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
CVE-2020-15058
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
CVE-2020-15054
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
CVE-2020-15058
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...