3578 matches found
CVE-2021-22946: Missing Cryptographic Step
A user can tell curl = 7.20.0 and = 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server --ssl-reqd on the command line orCURLOPTUSESSL set to CURLUSESSLCONTROL or CURLUSESSLALL withlibcurl. This requirement could be bypassed if the server would return a...
CVE-2021-22946
A user can tell curl = 7.20.0 and = 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server "--ssl-reqd" on the command line or"CURLOPTUSESSL" set to "CURLUSESSLCONTROL" or "CURLUSESSLALL" withlibcurl. This requirement could be bypassed if the server would retur...
Ricon Industrial Cellular Router S9922L has security vulnerabilities
Ricon Mobile Ricon Industrial Cellular Router S9922L is a mobile network router based on 4G/4.5G, WiFi and Vpn technology from Ricon Mobile Canada. It is used in intelligent transportation, Scada, Pos, industrial automation, telemetry, finance, environmental protection and many other fields. A...
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in kcal-app/kcal
Description Implement both Secure flag and httponly flag in the application. Proof of Concept Impact The secure flag is an option that can be set by the application server when sending a new cookie to the user within an HTTP Response. The purpose of the secure flag is to prevent cookies from bein...
Exchange/Outlook Autodiscover Bug Spills $100K+ Email Passwords
Guardicore security researcher Amit Serper has discovered a severe design bug in Microsoft Exchange’s autodiscover – a protocol that lets users easily configure applications such as Microsoft Outlook with just email addresses and passwords. The flaw has caused the Autodiscover service to leak...
PT-2024-11420
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when the VSI setup fails in i40e probe as part of PF switch setup, causing the driver to attempt to free misc IRQ vectors in i40e clear interrupt scheme. This results in...
CVE-2021-29904
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610...
CVE-2021-38863
IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154...
CVE-2021-20434
IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 196346...
CVE-2021-38863
IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154...
CVE-2021-38863: Insufficiently Protected Credentials
IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154...
PT-2021-22299
Name of the Vulnerable Software and Affected Versions IBM Security Verify Bridge version 1.0.5.0 Description The issue concerns the storage of user credentials in plain clear text, which can be accessed by a locally authenticated user. Recommendations For IBM Security Verify Bridge version 1.0.5....
CVE-2021-20434: Insufficiently Protected Credentials
IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 196346...
PT-2021-13964
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Bridge version 1.0.5.0 Description: The issue concerns the storage of user credentials in plain clear text, allowing a local user to read them. Recommendations: For IBM Security Verify Bridge version 1.0.5.0, consider...
Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Bridge (CVE-2021-20434, CVE-2021-38864, CVE-2021-20435)
Summary Multiple vulnerabilities fixed in IBM Security Verify Bridge Vulnerability Details CVEID: CVE-2021-20434 DESCRIPTION: IBM Security Verify Bridge stores user credentials in plain clear text which can be read by a local user. CVSS Base score: 4.1 CVSS Temporal Score: See:...
clear-institute.org Cross Site Scripting vulnerability OBB-2147246
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
clear-diamond.com Cross Site Scripting vulnerability OBB-2147245
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Bulletin: IBM Jazz for Service Management displays user credentials in plain clear text which can be read by a local user (CVE-2021-29904)
Summary IBM Jazz for Service Management displays user credentials in plain clear text which can be read by a local user. Vulnerability Details CVEID: CVE-2021-29904 DESCRIPTION: IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI displays user credentials in plain clear text which c...
CVE-2021-29904
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610...
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in spiral-project/ihatemoney
Description Secure flag is not implemented on the application Proof of Concept https://drive.google.com/file/d/10p4ejCFsLA6LO32nPNTRKqZjlqVHVpUf/view?usp=sharing Impact The secure flag is an option that can be set by the application server when sending a new cookie to the user within an HTTP...