852 matches found
Malicious code in meshblu-connector-arc-thermometer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f1869e723aea9d866700e89b3eaa39a2866762e0d10d4bebe7419833a14567e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
arc-con.de Cross Site Scripting vulnerability OBB-2647547
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Dangling reference in `access::Map` with Constant
An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with a user-supplied implementation of the Access trait could sometimes lead to dangling references being returned by the map...
GHSA-9PQX-G3JH-QPQQ Dangling reference in `access::Map` with Constant
An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with a user-supplied implementation of the Access trait could sometimes lead to dangling references being returned by the map...
Softwarebuero Zauner ARC input validation error vulnerability
Softwarebuero Zauner ARC is an application. softwarebuero Zauner ARC version 4.2.0.4 contains an input validation error vulnerability that stems from improper case-sensitive handling, which could be exploited by an attacker to cause easier password guessing...
Softwarebuero Zauner ARC Licensing Issue Vulnerability
Softwarebuero Zauner ARC is an application. softwarebuero Zauner ARC version 4.2.0.4 is vulnerable to an authorization issue, which stems from the fact that all permission checks are done on the client side instead of the server side. An attacker could exploit the vulnerability to gain privileges...
CVE-2021-45891
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application, since all permission checks are done client-side, not server-side...
CVE-2021-45893
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier...
CVE-2021-45892
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is storage of Passwords in a Recoverable Format...
CVE-2021-45893
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier...
CVE-2021-45892
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is storage of Passwords in a Recoverable Format...
Format string
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is storage of Passwords in a Recoverable Format...
CVE-2021-45891
Summary: CVE-2021-45891 affects Softwarebuero Zauner ARC 4.2.0.4. The vulnerability arises because permission checks are performed on the client side rather than server side, enabling privilege escalation within the application. Affected component: ARC client in version 4.2.0.4. Root cause: Clien...
CVE-2021-45891
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application, since all permission checks are done client-side, not server-side...
CVE-2021-45892
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is storage of Passwords in a Recoverable Format...
CVE-2021-45892
CVE-2021-45892 affects Softwarebuero Zauner ARC 4.2.0.4. The vulnerability arises from storing passwords in a recoverable format, enabling potential credential exposure if the stored data is accessed. Other details about affected components, exact root cause, exploit scenarios, affected versions ...
CVE-2021-45894
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Cleartext Transmission of Sensitive Information...
CVE-2021-45894
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Cleartext Transmission of Sensitive Information...
CVE-2021-45893
The CVE-2021-45893 entry applies to Softwarebuero Zauner ARC version 4.2.0.4. Connected documents confirm an input validation error caused by improper case sensitivity handling, which can make password guessing easier. Descriptions across sources (NVD, Red Hat, CNVD, PRION, CVE list) consistently...