3578 matches found
Information disclosure
In cleardatadlgtext of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...
CVE-2021-39631
In cleardatadlgtext of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...
PT-2022-10939 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12 Description: The issue concerns a misleading message in the "Clear storage" functionality, potentially leading to local information disclosure without requiring additional execution privileges...
Design/Logic Flaw
A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with administrative privileges could exploi...
CVE-2022-24319
A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the client and Geo SCADA web server are intercepted. Affected Product: ClearSCADA All Versions, EcoStruxure Geo SCADA Expert 2019 All Versions, EcoStruxure Geo...
CVE-2022-20630
A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with administrative privileges could exploi...
Cisco DNA Center Information Disclosure Vulnerability
A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with administrative privileges could exploi...
CVE-2022-22792
MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users...
ASB-A-193890833
In cleardatadlgtext of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2022-1003)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2021-0126)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-32039 MongoDB Extension for VS Code may unexpectedly store credentials locally in clear text
Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code includi...
MongoDB Extension for VS Code may unexpectedly store credentials locally in clear text
Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code includi...
PT-2022-28346
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue is related to the f fs component in the Linux Kernel, specifically with the ffs data clear function not properly clearing ffs eventfd. This could potentially lead to a security...
PT-2022-28332
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.90 Description A potential security issue exists due to the lack of clearance of ffs eventfd in ffs data clear. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-28324
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.170 Description A potential security issue exists due to the lack of clearing ffs eventfd in ffs data clear. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2022-28305
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.296 Description The issue is related to the f fs component in the Linux Kernel, specifically with the ffs data clear function not properly clearing ffs eventfd. This could potentially lead to a security...
PT-2022-28310
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.261 Description A potential security issue exists due to the lack of clearance of ffs eventfd in ffs data clear. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
GSD-2021-1002837 mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
mm/hwpoison: clear MFCOUNTINCREASED before retrying getanypage This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...
GSD-2021-1002701 mptcp: clear 'kern' flag from fallback sockets
mptcp: clear 'kern' flag from fallback sockets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...