Unspecified Vulnerability in Multiple Mozilla Products

Mozilla Firefox, Firefox ESR and Thunderbird are all developed by the Mozilla Foundation.Firefox is an open source web browser, Firefox ESR is an extended support version of Firefox.Thunderbird is a standalone email client from the Mozilla Thunderbird is a separate email client from Mozilla...

PT-2017-3800

Name of the Vulnerable Software and Affected Versions Moxa ioLogik 2542-HSPA versions 3.0 or lower Moxa Ioxpress Configuration Utility versions 2.3.0 or lower Description The issue is related to the use of an insecure cryptographic algorithm for storing and transmitting passwords in the Moxa...

Leakage Of Sensitive Data

github.com/influxdata/influxdb is vulnerable to leakage of sensitive data. The vulnerability is possible because passwords are revealed in clear text in influxhistory...

Gnome Keyring Daemon Credential Disclosure Vulnerability

The gnome-keyring-daemon is vulnerable to local credential disclosure as it leaves credentials accessible in memory. gnome-keyring-daemon is vulnerable to local credentials disclosure. Fortunately the attack can be spun on already compromised machines, but sadly, in those cases, an attacker can...

Mozilla: Out-of-bounds write in ClearKeyDecryptor (MFSA 2017-11, MFSA 2017-12)

An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media Plugin GMP sandbox. If a second mechanism is found to escape the sandbox, this vulnerability allows for the writing of arbitrary data with...

BAIC's Android app has a CAPTCHA design flaw

BAIC Android app is an online mobile service software. A CAPTCHA design vulnerability exists in the BAIC Android app. The vulnerability is caused due to the captcha being transmitted in clear text and without conditional restrictions. With the password recovery feature, an attacker can continuous...

Unauthorized Access Vulnerability in MyPower-WNC6600 Series Wireless Controller

WNC6600 series is a new generation of wireless controller Access Controller -AC independently developed by Mapletree Technology Co. The wireless controller can centrally manage Fit APs and wireless clients. Unauthorized access vulnerability exists in MyPower-WNC6600 series wireless controllers,...

Kony Enterprise Mobile Management Security Bypass Vulnerability

Kony Enterprise Mobile Management is a mobile application solution. A security bypass vulnerability exists in Kony Enterprise Mobile Management EMM prior to 4.2.5.2 that has the ability to disclose a private key in clear text when changing requested parameters, allowing an attacker to exploit the...

CVE-2017-5672

Kony Enterprise Mobile Management EMM before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the request...

CVE-2017-5672

Kony Enterprise Mobile Management EMM before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the request...

CVE-2017-5672

Kony EMM (Enterprise Mobile Management) prior to 4.2.5.2 contains a private RSA key disclosure vulnerability triggered by manipulating request parameters. The issue affects Kony EMM 4.2.0 and likely older versions, where a logged-in user can cause the server to return the private key used to decr...

CVE-2017-5672: Exposure of Sensitive Information to an Unauthorized Actor

Kony Enterprise Mobile Management EMM before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the request...

PT-2017-16662

Name of the Vulnerable Software and Affected Versions Kony Enterprise Mobile Management EMM versions prior to 4.2.5.2 Description The issue concerns the disclosure of a private key in clear-text when modifying request parameters. Recommendations For versions prior to 4.2.5.2, update to version...

SenNet Data Logger / Electricity Meter Code Execution

SenNet Data Logger appliances and Electricity Meters Multiple Vulnerabilities Note: Vendor has released the fix. Details to be documented in ICS-CERT Advisory. About SenNet is a trademark of Satel Spain that offers monitoring and remote-control solutions for businesses. Our engineers develop,...

Cookie Without Secure Flag Detected

When the secure flag is set on a cookie, the browser will prevent it from being sent over a clear text channel HTTP and only allow it to be sent when an encrypted channel is used HTTPS. The scanner discovered that a cookie was set by the server without the secure flag being set. Although the...

Wireless IP Camera (P2P) WIFICAM 'Cloud' Feature Design Flaw Vulnerability

Wireless IP Camera P2P WIFICAM is a wireless IP camera. A design flaw exists in the Wireless IP Camera P2P WIFICAM 'Cloud' feature, where the camera provides a 'Cloud' feature that is enabled by default, allowing consumers to bypass NAT and firewalls by managing the device over the network using ...

PT-2017-16771

Name of the Vulnerable Software and Affected Versions virglrenderer versions 0.6.0 and earlier Description The issue allows local guest OS users to cause a denial of service via a crafted VIRGL CCMD CLEAR command, resulting in a NULL pointer dereference. This occurs due to a problem in the util...

CVE-2016-8233

Log files generated by Lenovo XClarity Administrator LXCA versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user...

Code injection

Log files generated by Lenovo XClarity Administrator LXCA versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user...

PT-2017-9548

Name of the Vulnerable Software and Affected Versions Lenovo XClarity Administrator versions prior to 1.2.2 Description The issue concerns log files that may contain user credentials in clear text, potentially allowing a non-privileged user to view them. Recommendations For versions prior to 1.2....