3578 matches found
CVE-2018-2402
In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, see SAP Note 2362820 for more information about capture & replay, user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorization...
CVE-2018-2402
In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, see SAP Note 2362820 for more information about capture & replay, user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorization...
CVE-2018-2402: Exposure of Sensitive Information to an Unauthorized Actor
In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, see SAP Note 2362820 for more information about capture & replay, user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorization...
PT-2018-15533
Name of the Vulnerable Software and Affected Versions SAP HANA versions 1.00 through 2.00 Description The issue affects systems using the optional capture & replay functionality, where user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker...
Man-in-the-middle Attack Vulnerability in Multiple Belden Hirschmann Switch Products
Belden Hirschmann RS, etc. are switch products of Belden USA. A security vulnerability exists in the web interface of several Belden Hirschmann switch products, which originates from a program that passes sensitive information in clear text. An attacker could exploit this vulnerability to obtain...
CVE-2018-7552
There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...
UBUNTU-CVE-2018-7552
There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...
CVE-2018-7552
There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...
CVE-2018-7552
There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...
CVE-2018-7552
There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...
CVE-2018-7552
CVE-2018-7552 describes an invalid free in Mapping::DoubleHash::clear within sam2p 0.49.4 that can cause a segmentation fault. Public disclosures in multiple feeds (OSV, Debian DLA-1340-1, OSV-UBUNTU-CVE-2018-7552, NVD, and related entries) indicate this vulnerability may lead to denial of servic...
CVE-2018-7552: Improper Restriction of Operations within the Bounds of a Memory Buffer
There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...
Third party CSS is not safe
A few days ago there was a lot of chatter about a 'keylogger' built in CSS. Some folks called for browsers to 'fix' it. Some folks dug a bit deeper and saw that it only affected sites built in React-like frameworks, and pointed the finger at React. But the real problem is thinking that third part...
PT-2018-1093
Name of the Vulnerable Software and Affected Versions sam2p version 0.49.4 Description The issue is caused by an invalid free in the Mapping::DoubleHash::clear function in mapping.cpp, leading to a segmentation fault. This can be triggered by a crafted input, potentially allowing a remote attacke...
Schneider Electric IGSS Mobile
CVSS v3 6.4 ATTENTION: Locally exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: IGSS Mobile Vulnerabilities: Improper Certificate Validation, Plaintext Storage of a Password AFFECTED PRODUCTS Schneider Electric reports that the vulnerabilities affect the following IGS...
CVE-2018-1000060
Sensu's redaction function fails to handle the redaction of sensitive data in deeply nested data structures, resulting in sensitive data, such as passwords, being logged in clear-text...
Information disclosure
An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information...
CVE-2017-9969
An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information...
CVE-2017-9969
An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information...
CVE-2017-9969
An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information...