281 matches found
CVE-2019-19890
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 201608171855 devices. Admin credentials are sent over cleartext HTTP...
PT-2019-15991
Name of the Vulnerable Software and Affected Versions Humax Wireless Voice Gateway HGB10R-2 version 20160817 1855 Description An issue was discovered where admin credentials are sent over cleartext HTTP, potentially exposing sensitive information. Recommendations For Humax Wireless Voice Gateway...
PT-2019-15795
Name of the Vulnerable Software and Affected Versions Last.fm desktop app Last.fm Scrobbler versions through 2.1.39 Description The issue concerns the Last.fm desktop app making HTTP requests that include an API key without using SSL/TLS. Although there is an option to enable SSL, it is disabled ...
CVE-2019-19316
When using the Azure backend with a shared access signature SAS, Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP...
Design/Logic Flaw
When using the Azure backend with a shared access signature SAS, Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP...
CVE-2019-19316
When using the Azure backend with a shared access signature SAS, Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP...
CVE-2019-19316
When using the Azure backend with a shared access signature SAS, Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP...
PT-2019-15126
Name of the Vulnerable Software and Affected Versions Tomedo Server version 1.7.3 Description The issue concerns the communication between the Customer's Tomedo Server and the Vendor Tomedo Server, which occurs over HTTP in cleartext. This makes it possible for unauthorized actors to intercept th...
CVE-2019-14959
JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection...
Design/Logic Flaw
JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection...
CVE-2019-14959
JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection...
PT-2019-13896
Name of the Vulnerable Software and Affected Versions JetBrains Toolbox versions prior to 1.15.5605 Description The issue arises from the software resolving an internal URL via a cleartext http connection. Recommendations For versions prior to 1.15.5605, update to version 1.15.5605 or later to...
CVE-2019-14954
JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection...
PT-2019-13891
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2019.2 Description The issue concerns the resolution of the markdown plantuml artifact download link via a cleartext http connection. Recommendations For versions prior to 2019.2, update to version...
CVE-2019-13140
Inteno EG200 EG200-WU7P1UADAMO3.16.4-1902261650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP...
Design/Logic Flaw
Inteno EG200 EG200-WU7P1UADAMO3.16.4-1902261650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP...
CVE-2019-13140
Inteno EG200 EG200-WU7P1UADAMO3.16.4-1902261650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP...
Inteno IOPSYS Gateway - Improper Access Restrictions
Inteno IOPSYS Gateway - Improper Access Restrictions Exploit Title: Inteno IOPSYS Gateway 3DES Key Extraction - Improper Access Restrictions Date: 2019-06-29 Exploit Author: Gerard Fuguet [email protected] Vendor Homepage: https://www.intenogroup.com/ Version: EG200-WU7P1UADAMO3.16.4-1902261650...
PT-2019-6283
Name of the Vulnerable Software and Affected Versions Unbound versions prior to 1.9.5 Description The issue is related to insufficient neutralization of special elements in a request, which can be exploited by a remote attacker to impact data integrity. This can occur upon a successful...