The vulnerability of the Windows operating system, related to the lack of protection for service data, allows a perpetrator to disclose protected information in Windows error reports.

The vulnerability of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose sensitive information contained in Windows error reports...

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in its lack of security measures to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the SAP Business Objects Business Intelligence Platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

CVE-2020-24683

The affected versions of S+ Operations version 2.1 SP1 and earlier used an approach for user authentication which relies on validation at the client node client-side authentication. This is not as secure as having the server validate a client application before allowing a connection. Therefore, i...

The vulnerability of the SAP NetWeaver software integration platform lies in the lack of protection for operational data, which allows attackers to disclose confidential information.

The vulnerability of the SAP NetWeaver software integration platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

GE Healthcare Imaging and Ultrasound Products

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Healthcare Equipment: GE Imaging and Ultrasound Products Vulnerabilities: Unprotected Transport of Credentials, Exposure of Sensitive System Information to an Unauthorized Control Sphere 2. RISK...

The vulnerability of the KTS web interface “Mayak,” related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted HTTP POST request...

The vulnerability of the VMware ESXi hypervisor and the VMware Cloud Foundation virtualization platform allows a perpetrator to execute arbitrary code.

The vulnerability of the VMware ESXi hypervisor and the VMware Cloud Foundation virtualization platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Delivery Optimization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Delivery Optimization service is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2020-28330

Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Versions: 2.5.1.8. An attacker armed with hardcoded API credentials retrieved by exploiting CVE-2020-28329 can issue an authenticated query to display the admin password for the main web user interface listenin...

CVE-2020-28330

Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Versions: 2.5.1.8. An attacker armed with hardcoded API credentials retrieved by exploiting CVE-2020-28329 can issue an authenticated query to display the admin password for the main web user interface listenin...

CVE-2020-28330

Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Versions: 2.5.1.8. An attacker armed with hardcoded API credentials retrieved by exploiting CVE-2020-28329 can issue an authenticated query to display the admin password for the main web user interface listenin...

CVE-2020-28330

Barco wePresent WiPG-1600W is affected by CVE-2020-28330 (Unprotected Transport of Credentials) in version 2.5.1.8. An attacker can use hardcoded API credentials (obtainable by exploiting CVE-2020-28329) to issue an authenticated query and display the admin password for the main web UI on port 44...

The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to the device...

Barco wePresent Admin Credential Exposure

KL-001-2020-005 : Barco wePresent Admin Credentials Exposed In Plain-text Title: Barco wePresent Admin Credentials Exposed In Plain-text Advisory ID: KL-001-2020-005 Publication Date: 2020.11.20 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2020-005.txt 1. Vulnerability Detai...

The software for resource planning in Microsoft Dynamics 365 is vulnerable due to the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out XSS attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...

CVE-2020-27557

Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials...

Design/Logic Flaw

Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials...

CVE-2020-27557

CVE-2020-27557 describes an Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921. The issue allows local users to access the video streaming username and password via SQLite files containing plain text credentials. Affected software/hardware: BASETech G...

CVE-2020-27557

Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials...

Basetech Ge-131 Bt-1837836 Security Vulnerability

Basetech Ge-131 Bt-1837836 is a webcam from Basetech. A security vulnerability exists in BASETech GE-131 BT-1837836 firmware 20180921, which stems from an unprotected stored credentials vulnerability that allows a local user to obtain a streaming username and password via a SQLite file containing...