Lucene search
+L

248 matches found

OSV
OSV
added 2021/12/14 6:15 p.m.8 views

CVE-2021-43388

Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. The issue is addressed by ensuring that the allowBackup flag in the manifest is False...

7.5CVSS7.1AI score0.00568EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/14 6:15 p.m.8 views

CVE-2021-43388

Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. The issue is addressed by ensuring that the allowBackup flag in the manifest is False...

7.5CVSS7.1AI score0.00568EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/14 6:15 p.m.19 views

CVE-2021-43388

Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. The issue is addressed by ensuring that the allowBackup flag in the manifest is False...

7.5CVSS0.00568EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/14 6:15 p.m.17 views

Design/Logic Flaw

Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. The issue is addressed by ensuring that the allowBackup flag in the manifest is False...

4.3CVSS7.3AI score0.00568EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/14 6:00 p.m.27 views

CVE-2021-43388

Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. The issue is addressed by ensuring that the allowBackup flag in the manifest is False...

7.5AI score0.00568EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/14 6:00 p.m.39 views

CVE-2021-43388

CVE-2021-43388 affects the Unisys Cargo Mobile App prior to version 1.2.29. The vulnerability stems from storing sensitive information in cleartext, which could be exposed if backups are accessed. The cited fix is to set the manifest’s allowBackup flag to False to prevent backup of sensitive data...

7.5CVSS7.3AI score0.00568EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/12/14 12:00 a.m.9 views

Unisys Cargo Mobile 安全漏洞

Unisys Cargo Mobile is a shipping solution from Unisys, Inc. An information disclosure vulnerability exists in the Unisys Cargo Mobile Application prior to 1.2.29. The vulnerability stems from the use of plaintext storage of sensitive information, which could be exploited by an attacker to obtain...

7.5CVSS5.6AI score0.00568EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/15 7:15 p.m.22 views

CVE-2021-35056

Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. An unintended executable might run...

6.7CVSS0.00251EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/15 7:15 p.m.9 views

CVE-2021-35056

Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. An unintended executable might run...

6.7CVSS6.6AI score0.00251EPSS
SaveExploits0References2
Prion
Prion
added 2021/07/15 7:15 p.m.21 views

Code injection

Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. An unintended executable might run...

4.6CVSS6.6AI score0.00251EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/15 7:15 p.m.4 views

CVE-2021-35056

Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. An unintended executable might run...

6.7CVSS6.7AI score0.00251EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/07/15 6:14 p.m.34 views

CVE-2021-35056

Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. An unintended executable might run...

6.8AI score0.00251EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/15 6:14 p.m.75 views

CVE-2021-35056

CVE-2021-35056 affects Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0, which have an unquoted Windows search path for a scheduled task. This can allow an unintended executable to run. Connected sources confirm the vulnerability details; no exploitation status or patch information is...

6.7CVSS6.6AI score0.00251EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/07/15 12:00 a.m.7 views

Unisys Stealth 代码问题漏洞

The unisys stealthcore is a firewall from Unisys. This firewall is easy to configure and expand, can be upgraded by micro-segmentation, and fully protects internal data security. Unisys Stealth has a security vulnerability. An unexpected executable file may be run...

6.7CVSS6.6AI score0.00251EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/05/31 12:00 a.m.7 views

Denial of Service Vulnerability in Unisys Desktop Operating System Professional Edition

Unisys Desktop Operating System is a computer operating system developed on Linux. A denial of service vulnerability exists in Unisys Desktop Operating System Professional Edition. An attacker could exploit this vulnerability to cause the program to crash...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/05/14 12:00 a.m.8 views

Unicom Desktop OS Personal Edition (1030) x86_64 Competitive Condition Vulnerability

Unisys Desktop Operating System Personal Edition is Unisys software based on Linux5.3 kernel to create a domestic desktop operating system designed for individual users. Unisys Desktop OS Personal Edition 1030 x8664 suffers from a competitive condition vulnerability that can be exploited by...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/05/14 12:00 a.m.11 views

Unisys Desktop OS Personal Edition (1030) x86_64 has a logic flaw vulnerability

Unisys Desktop Operating System Personal Edition is Unisys software based on Linux5.3 kernel to create a domestic desktop operating system designed for individual users. Unisign Desktop OS Personal Edition 1030 x8664 has a logic flaw vulnerability, which can be exploited by an attacker to bypass...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2021/04/28 12:00 a.m.17 views

Unisys Data Exchange Management Studio Cross-Site Scripting Vulnerability

Unisys Data Exchange Management Studio is a data exchange component from the American company Unisys. A cross-site scripting vulnerability exists in Unisys Data Exchange Management Studio version 5.0.34 and prior versions, which originates from input that is not cleared from HTML document fields,...

5.4CVSS6.1AI score0.00466EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/27 11:15 a.m.10 views

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

5.4CVSS5.8AI score0.00466EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/27 11:15 a.m.20 views

CVE-2020-35542

Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack...

5.4CVSS0.00466EPSS
SaveExploits0References1
Rows per page
Query Builder