CVE-2023-37857

PHOENIX CONTACT WP 6xxx series web panels are affected in versions prior to 4.0.10. An authenticated administrator can read hardcoded cryptographic keys, enabling the attacker to forge valid session cookies. However, these forged cookies are not sufficient to establish a valid session on the devi...

CVE-2023-37857 PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing the attacker to create valid session cookies. These session-cookies created by the attacker are not sufficient to...

(0Day) Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within...

PT-2023-25533 · Unknown · Kunduz - Homework Helper App

Name of the Vulnerable Software and Affected Versions: Kunduz - Homework Helper App versions prior to 6.2.3 Description: The issue affects the Kunduz - Homework Helper App, allowing for authentication abuse and authentication bypass due to the use of a hard-coded cryptographic key. This enables...

HCL Technologies DRYiCE MyCloud Encryption Issue Vulnerability

HCL Technologies DRYiCE MyCloud is a Hybrid Cloud Lifecycle Management product from HCL Technologies, USA. A security vulnerability exists in HCL Technologies DRYiCE MyCloud that stems from the use of a weak cryptographic algorithm...

PT-2023-18918 · Hcl · Hcl Dryice Mycloud

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyCloud affected versions not specified Description: The issue is related to the use of a broken cryptographic algorithm, which can potentially allow an attacker to compromise the confidentiality and integrity of sensitive...

Microsoft Windows Multiple Vulnerabilities (KB5029247)

This host is missing an important security update according to Microsoft KB5029247 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-36906

Windows Cryptographic Services Information Disclosure Vulnerability...

CVE-2023-36907

Windows Cryptographic Services Information Disclosure Vulnerability...

CVE-2023-36907

Windows Cryptographic Services Information Disclosure Vulnerability...

CVE-2023-36906

Windows Cryptographic Services Information Disclosure Vulnerability...

CVE-2023-36906

Windows Cryptographic Services Information Disclosure Vulnerability...

CVE-2023-36907

Windows Cryptographic Services Information Disclosure Vulnerability...

Information disclosure

Windows Cryptographic Services Information Disclosure Vulnerability...

Information disclosure

Windows Cryptographic Services Information Disclosure Vulnerability...

CVE-2023-36907 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2023-36906 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2023-36906

Technical details for CVE-2023-36906 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are confirmed here. Monitor for updates.

CVE-2023-36906 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2023-36907

Technical details about CVE-2023-36907 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor official updates from NVD/Microsoft for remediation.