Lucene search
+L

8895 matches found

OSV
OSV
added 2023/07/19 6:15 a.m.8 views

CVE-2023-3761

A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Password Change Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The...

7.5CVSS4.3AI score0.0049EPSS
SaveExploits0References3
Prion
Prion
added 2023/07/19 6:15 a.m.25 views

Default credentials

A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Password Change Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The...

2.6CVSS7.4AI score0.0049EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2023/07/19 6:00 a.m.61 views

CVE-2023-3761

CVE-2023-3761 concerns Intergard SGS 8.7.0, specifically a vulnerability in the Password Change Handler that causes cleartext transmission of sensitive information. Exploitation is network-based and can be attempted remotely, with the attack having high impact on confidentiality and no impact on ...

7.5CVSS5.7AI score0.0049EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/07/19 6:00 a.m.42 views

CVE-2023-3761 Intergard SGS Password Change cleartext transmission

A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Password Change Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The...

3.7CVSS7.7AI score0.0049EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/19 12:00 a.m.12 views

PT-2023-7026 · Unknown · Intergard Sgs

Name of the Vulnerable Software and Affected Versions: Intergard SGS version 8.7.0 Description: A vulnerability was found in the Password Change Handler component, leading to cleartext transmission of sensitive information. The attack can be launched remotely, with a rather high complexity and...

7.8CVSS6.7AI score0.0049EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/07/19 12:00 a.m.12 views

PT-2023-26044 · Unknown · Intergard Sgs

Name of the Vulnerable Software and Affected Versions: Intergard SGS version 8.7.0 Description: A vulnerability was found in Intergard SGS, which has been classified as problematic. This issue affects an unknown part of the system and leads to cleartext storage of sensitive information in memory...

7.5CVSS6.7AI score0.0041EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/07/19 12:00 a.m.13 views

PT-2023-7027 · Unknown · Intergard Sgs

Name of the Vulnerable Software and Affected Versions: Intergard SGS version 8.7.0 Description: The issue is related to the transmission of sensitive information in cleartext due to a vulnerability in the SQL Query Handler component. This can be exploited remotely, potentially allowing an attacke...

7.8CVSS7.2AI score0.00595EPSS
SaveExploits1References8
NVD
NVD
added 2023/07/18 3:15 a.m.26 views

CVE-2023-34142

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux Device Manager Server, Device Manager Agent, Host Data Collector components allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02...

9CVSS0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/18 3:15 a.m.8 views

CVE-2023-34142

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux Device Manager Server, Device Manager Agent, Host Data Collector components allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02...

7.5CVSS5.8AI score0.0034EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/18 3:15 a.m.25 views

Code injection

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux Device Manager Server, Device Manager Agent, Host Data Collector components allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02...

5CVSS7.5AI score0.0034EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/18 2:02 a.m.17 views

CVE-2023-34142 Cleartext Transmission Vulnerability in Hitachi Device Manager

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux Device Manager Server, Device Manager Agent, Host Data Collector components allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02...

9CVSS6.9AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
added 2023/07/18 2:02 a.m.74 views

CVE-2023-34142

CVE-2023-34142 affects Hitachi Device Manager. The issue is a Cleartext Transmission of Sensitive Information vulnerability that can allow interception of data across Hitachi Device Manager components (Device Manager Server, Device Manager Agent, Host Data Collector) on Windows and Linux, impacti...

9CVSS7.8AI score0.0034EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/18 2:02 a.m.34 views

CVE-2023-34142 Cleartext Transmission Vulnerability in Hitachi Device Manager

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux Device Manager Server, Device Manager Agent, Host Data Collector components allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02...

9CVSS9.2AI score0.0034EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/17 4:15 p.m.37 views

CVE-2023-35818

An issue was discovered on Espressif ESP32 3.0 ESP32rev300 ROM devices. An EMFI attack on ECO3 provides the attacker with a capability to influence the PC value at the CPU context level, regardless of Secure Boot and Flash Encryption status. By using this capability, the attacker can exploit...

6.8CVSS0.00222EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/07/13 5:15 p.m.7 views

CVE-2023-35833

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the...

6.5CVSS5.4AI score0.00341EPSS
SaveExploits0References3
NVD
NVD
added 2023/07/13 5:15 p.m.25 views

CVE-2023-35833

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the...

6.5CVSS0.00341EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/13 5:15 p.m.11 views

CVE-2023-35833

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the...

6.5CVSS5.8AI score0.00341EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/13 5:15 p.m.32 views

Design/Logic Flaw

DISPUTED An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE...

4CVSS6.5AI score0.00341EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/07/13 12:00 a.m.32 views

CVE-2023-35833

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the...

6.8AI score0.00341EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/13 12:00 a.m.15 views

CVE-2023-35833

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the...

7.1AI score0.00341EPSS
SaveExploits0References2
Rows per page
Query Builder