GO-2022-0889 Authentication bypass by capture-replay in github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint...

GO-2022-0813 Authentication bypass by capture-replay in github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint...

GO-2022-0310 Capture-replay in Gitea in code.gitea.io/gitea

Capture-replay in Gitea in code.gitea.io/gitea...

GO-2023-1659 Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer...

CVE-2024-31905

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2024-31905

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2024-31905

IBM QRadar Network Packet Capture 7.5 is affected by CVE-2024-31905 due to failure to properly enable HTTP Strict Transport Security, enabling man-in-the-middle–style access to sensitive information. The issue is network-exploitable (AV:N, AC:H, PR:N, UI:N, S:U) with confidentiality impact HIGH a...

CVE-2024-31905 IBM QRadar Network Packet Capture information disclosure

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2024-31905 IBM QRadar Network Packet Capture information disclosure

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

IBM QRadar Network Packet Capture security vulnerability

IBM QRadar Network Packet Capture is an optional QRadar appliance from International Business Machines IBM that can be used to store and manage data when no other network packet capture is available. A security vulnerability exists in IBM QRadar Network Packet Capture version 7.5 that stems from ...

CVE-2024-31905: Cleartext Transmission of Sensitive Information

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2024-7408

This vulnerability exists in Airveda Air Quality Monitor PM2.5 PM10 due to transmission of sensitive information in plain text during AP pairing mode. An attacker in close proximity could exploit this vulnerability by capturing Wi-Fi traffic of Airveda-AP. Successful exploitation of this...

Screen Capture Unauthenticated RCE

The vulnerability of the Screen Capture function in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, o...

com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9, <=4.1.0), org.jenkins-ci.lib:xtrigger-lib (0.36) +5 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (1.644)

org.jenkins-ci.main:jenkins-core MAVEN version 1.644 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.elasticbox.jenkins-ci.plugins:elasticbox =4.0.9, =4.0.4, =1.0.45, =1.0.47 Source cves:...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software (versions 16.0.1.1663 through 24.0.1.2405 and possibly later) allows a local attacker to perform an Authentication Bypass . This is caused by insufficient protection against capture-replay attacks . While no specific patch version is c...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

PT-2024-28262 · Horizon Business Services Inc. · Caterease

Name of the Vulnerable Software and Affected Versions: Horizon Business Services Inc. Caterease Software versions 16.0.1.1663 through 24.0.1.2405 Description: The issue allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against...