Microsoft Azure CLI Access Credentials

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials remotely...

Database Mess Up: 7TB of Healthcare Data Leak Affects 12 Million Patients

By Deeba Ahmed Yet another day, more unprotected data left in the Cloud without password or security measures. This is a post from HackRead.com Read the original post: Database Mess Up: 7TB of Healthcare Data Leak Affects 12 Million Patients...

WebLogic Server Auth Bypass

The vulnerability of the Core component of the WebLogic Server software is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information...

Microsoft Visual Studio .NET Information Disclosure

The vulnerability of the Microsoft Visual Studio software and the .NET Core software platform is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow attackers to access confidential information...

PT-2023-5977 · Microsoft · Windows Remote Desktop Gateway +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Gateway RD Gateway affected versions not specified Description: The issue is related to a lack of protection for service data in Windows Remote Desktop Gateway RD Gateway, which can be exploited by a remote attacker to...

PT-2023-6058 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue is related to a lack of protection for service data in Windows Deployment Services, which can be exploited by a remote attacker to disclose protected...

IBM Robotic Process Automation Info Disclosure

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

Visualware MyConnection Server Unauthorized Access

The vulnerability of the doRTAAccessUPass method in the software for testing and monitoring network quality by Visualware MyConnection Server is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

PT-2023-5298 · Unknown · Modulys Gp

Name of the Vulnerable Software and Affected Versions: MODULYS GP MOD3GP-SY-120K affected versions not specified Description: The issue is related to the lack of security in the authentication process of the web application, allowing information to be obtained by sending specific requests. This i...

SonicWall Analytics Operational Data Access

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS global network firewall management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gai...

Schneider Electric spaceLYnk/homeLYnk Logic Compromise

The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYn logic controllers is related to the lack of protection for operational data. Exploiting this vulnerability allows a remote attacker to compromise the device during the initial setup process...

Schneider Electric spaceLYnk/homeLYnk Logic Disclosed Information

The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYnk logic controllers is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

SAP BusinessObjects Business Intelligence Lifecycle Management Unauthorized Access

The vulnerability of the Lifecycle Management console component of the SAP BusinessObjects Business Intelligence platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, change...

WLAN AutoConfig Service Code Execution

The vulnerability of the WLAN AutoConfig service in the Microsoft Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-34588

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

CVE-2021-34588

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

CVE-2021-34588 Bender Charge Controller: Unprotected data export

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

CVE-2021-34588: Direct Request

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

Bender ebee 充电控制器 安全漏洞

The ebee is a charge controller from Bender. A security vulnerability exists in the Bender ebee Charge Controller that stems from an unprotected data export. The backup export is protected by a random key. The key is set at user login. It is empty after a reboot. An attacker can exploit this...

NETGEAR Router Service Information Disclosure

The vulnerability of NETGEAR’s embedded routing software, such as RBK352, RBR350, and RBS350, is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...