3578 matches found
Security Bulletin: IBM Security Verify Governance stores user credentials in plain clear text which can be read by a local user (CVE-2022-22470)
Summary IBM Security Verify Governance is vulnerable to exposure of user credentials to local users due to storage of credentials in cleartext CVE-2022-22470. This vulnerability has been removed by a code fix. Vulnerability Details CVEID:CVE-2022-22470 DESCRIPTION: IBM Security Verify Governance...
Security Bulletin: Security vulnerabilities have been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component
Summary IBM Security Verify Governance, Identity Manager virtual appliance component has addressed the following vulnerabilities Vulnerability Details CVEID:CVE-2022-22457 DESCRIPTION: IBM Security Verify Governance stores sensitive information including user credentials in plain clear text which...
PT-2025-12662
Name of the Vulnerable Software and Affected Versions H3C R3000 version V100R009 H3C NX600 version V100R0011 H3C NX15000 version V100R005 H3C NX30 version V100R0011 H3C NX54 version V100R011 H3C BX54 version V100R004 H3C BX54-E version V100R0010 H3C NX18 Plus version V100R006 Description The issu...
PT-2025-12003
Name of the Vulnerable Software and Affected Versions Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress versions up to, and including, 2.2.5 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ctf clear cach...
WordPress Custom Twitter Feeds plugin <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function vulnerability
Cross-Site Request Forgery to Cache Reset via ctfclearcacheadmin Function vulnerability discovered by Kévin Mosbahi Mika in WordPress Plugin Custom Twitter Feeds Tweets Widget versions = 2.2.5...
PT-2025-16658
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A shift-out-of-bounds issue has been resolved in the Linux kernel, specifically in the ntb hw switchtec module. The kernel API ntb mw clear trans would pass 0 to both addr and size,...
net/mlx5: Clear port select structure when fail to create
...
CVE-2025-1636
Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authenticated user to inadvertently leak the My Personal Credentials in a shared vault via the clear history feature due to faul...
CVE-2025-1636
Devolutions Remote Desktop Manager version 2024.3.29 and earlier on Windows is vulnerable to a faulty business logic error. This flaw exists in the My Personal Credentials password history component , where an authenticated user can inadvertently leak My Personal Credentials into a shared vault w...
PT-2025-11170
Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2024.3.29 and earlier Description: The issue concerns the exposure of sensitive information in the My Personal Credentials password history component. This allows an authenticated user to...
PT-2025-27975
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an integer underflow that can occur when a device sends a specific input, leading to MMIO write access to an invalid page in the i40e clear hw function. This is...
PT-2025-20519
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the error path in xe migrate clear, where the code waits on m-fence, which could be the local fence, but th...
Linux Distros Unpatched Vulnerability : CVE-2024-56628
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh...
Linux Distros Unpatched Vulnerability : CVE-2020-25678
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafa...
SUSE CVE-2024-58006
In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pciepcsetbar In commit 4284c88fff0e "PCI: designware-ep: Allow pciepcsetbar update inbound map address" setbar was modified to support dynamically changing the backing physical...
SUSE CVE-2025-21722
In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is referenced Patch series "nilfs2: protect busy buffer heads from being force-cleared". This series fixes the buffer head state inconsistency issues reported by syzbot that occurs when...
Bosscomm IF740 security vulnerabilities
Bosscomm IF740 is an OBD2 scanner for automotive diagnostics from Bosscomm. It can read codes for automotive engine, SRS, ABS, TCM, etc. A security vulnerability exists in the Bosscomm IF740 that stems from communications being sent in clear text, which could lead to a man-in-the-middle attack...
Bosscomm IF740 security vulnerabilities
Bosscomm IF740 is an OBD2 scanner for automotive diagnostics from Bosscomm. It can read codes for automotive engine, SRS, ABS, TCM, etc. A security vulnerability exists in the Bosscomm IF740 that stems from passwords being stored in clear text...
DEBIAN-CVE-2024-58006
In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pciepcsetbar In commit 4284c88fff0e "PCI: designware-ep: Allow pciepcsetbar update inbound map address" setbar was modified to support dynamically changing the backing physical...
UBUNTU-CVE-2024-58006
In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pciepcsetbar In commit 4284c88fff0e "PCI: designware-ep: Allow pciepcsetbar update inbound map address" setbar was modified to support dynamically changing the backing physical...