CVE-2024-9679

The CVE-2024-9679 entry concerns Trellix DLP Extension, version 11.11.1.3, with a hardcoded cryptographic key that enables decryption of previously encrypted user credentials. The connected PT-2024-39758 advisory confirms the affected software and exact version, and states that the vulnerability ...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues.. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for...

CVE-2024-54471

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to leak a user's credentials...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.7.1 and macOS Ventura prior to 13.7.1, which stems from a vulnerability that could compromise user credentials...

CVE-2024-54471

CVE-2024-54471 affects macOS (Sonoma 14.7.1 and Ventura 13.7.1) where insufficient entitlement checks allowed a malicious application to leak a user’s credentials. The vulnerability stems from entitlement enforcement, and Apple has addressed it by applying additional entitlement checks and releas...

CVE-2024-53292

Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper. A local high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed...

CVE-2024-46340

TL-WR845NUNV4201214, TP-Link TL-WR845NUNV4200909, and TL-WR845NUNV4190219 was discovered to transmit user credentials in plaintext after executing a factory reset...

CVE-2024-46340

TL-WR845NUNV4201214, TP-Link TL-WR845NUNV4200909, and TL-WR845NUNV4190219 was discovered to transmit user credentials in plaintext after executing a factory reset...

CVE-2024-46340: Cleartext Storage of Sensitive Information

TL-WR845NUNV4201214, TP-Link TL-WR845NUNV4200909, and TL-WR845NUNV4190219 was discovered to transmit user credentials in plaintext after executing a factory reset...

PT-2024-31965 · Tp Link · Tp-Link Tl-Wr845N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR845NUN versions 190219 through 201214 Description: The issue allows the transmission of user credentials in plaintext after a factory reset is executed. Recommendations: For TP-Link TL-WR845NUN versions 190219 through 201214,...

CVE-2024-12057

User credentials login & password are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end. By exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log...

CVE-2024-12057 User credentials recorded in log files

User credentials login & password are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end. By exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log...

CVE-2024-12057

PcVue Web back end vulnerability CVE-2024-12057 causes user credentials to be written to log files when a user authenticates with an incompatible Web client, potentially allowing an attacker with access to logs to retrieve login data and gain unauthorized access to the application. Document set c...

CVE-2024-12057 User credentials recorded in log files

User credentials login & password are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end. By exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log...

Updated wget packages fix security vulnerability

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host. CVE-2024-10524...

CBL Mariner 2.0 Security Update: wget (CVE-2024-10524)

The version of wget installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10524 advisory. - Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credential...

CVE-2024-43784 Re-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to it's deletion

lakeFS is an open-source tool that transforms object storage into a Git-like repository. Existing lakeFS users who have issued credentials to users who have been deleted are affected by this vulnerability. When creating a new user with the same username as a deleted user, that user will inherit a...

CVE-2024-43784

CVE-2024-43784 affects lakeFS: when creating a new user with a username that previously belonged to a deleted user, the new user inherits all of the deleted user’s credentials. This is fixed in lakeFS release v1.33.0 and later. Affected users should upgrade to ≥1.33.0; if upgrading is not possibl...

Re-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to its deletion

Impact Existing lakeFS users who have issued credentials to users who have been deleted. Creating a new user with the same username, that user will inherit all of the previous user's credentials lakeFS needs to delete user credentials upon user deletion. Patches Has the problem been patched? What...

GHSA-HH33-46Q4-HWM2 Re-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to its deletion

Impact Existing lakeFS users who have issued credentials to users who have been deleted. Creating a new user with the same username, that user will inherit all of the previous user's credentials lakeFS needs to delete user credentials upon user deletion. Patches Has the problem been patched? What...