CVE-2023-32010: Sensitive Data Storage in Improperly Locked Memory

Windows Bus Filter Driver Elevation of Privilege Vulnerability...

Chatwork 代码注入漏洞

Chatwork is a business group chat application from Chatwork, Inc. A security vulnerability exists in Chatwork Desktop Application version 2.6.43 and earlier, which stems from a code injection vulnerability that allows a non-administrative user to store and access audio and image data for the...

Financial services company OneMain fined $4.25 million for security lapses

A series of security errors and mishaps has cost personal loan provider OneMain $4.25m in penalties, issued by the New York State department of financial services. The fines, coming at the end of a detailed investigation into how security practices at the company were determined to be below-par,...

CVE-2023-2665

Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0...

PT-2023-3010 · Unknown · Conprosys Hmi System

Name of the Vulnerable Software and Affected Versions: CONPROSYS HMI System CHS versions prior to 3.5.3 Description: The issue concerns the storage of passwords in plaintext within the CONPROSYS HMI System. Specifically, account information for the database is saved in a local file without...

CVE-2023-24899: Sensitive Data Storage in Improperly Locked Memory

Windows Graphics Component Elevation of Privilege Vulnerability...

CVE-2023-28283: Sensitive Data Storage in Improperly Locked Memory

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

CVE-2023-24946: Sensitive Data Storage in Improperly Locked Memory

Windows Backup Service Elevation of Privilege Vulnerability...

CVE-2023-28238: Sensitive Data Storage in Improperly Locked Memory

Windows Internet Key Exchange IKE Protocol Extensions Remote Code Execution Vulnerability...

CVE-2023-28236: Sensitive Data Storage in Improperly Locked Memory

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-28219: Sensitive Data Storage in Improperly Locked Memory

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...

CVE-2023-28273: Sensitive Data Storage in Improperly Locked Memory

Windows Clip Service Elevation of Privilege Vulnerability...

CVE-2023-28256: Sensitive Data Storage in Improperly Locked Memory

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2023-28278: Sensitive Data Storage in Improperly Locked Memory

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2023-28229: Sensitive Data Storage in Improperly Locked Memory

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

CVE-2023-28255: Sensitive Data Storage in Improperly Locked Memory

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2023-28220: Sensitive Data Storage in Improperly Locked Memory

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...

Vulnerability of performance optimization and security systems: Dell SupportAssist for Home PCs and Dell SupportAssist for Business PCs have a vulnerability related to unencrypted storage of critical information, allowing unauthorized access to protected data by attackers.

The vulnerability of performance optimization and security systems in Dell SupportAssist for Home PCs and Dell SupportAssist for Business PCs lies in the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected...

The vulnerability of the Active IQ Unified Manager, a tool for managing the state and performance of data storage systems, arises due to the lack of measures taken to protect the structure of web pages. This vulnerability allows attackers to perform cross-site scripting attacks.

The vulnerability of the Active IQ Unified Manager, a tool for managing system storage performance and status, exists due to the lack of protective measures taken to secure the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

ProfilePictureData is not stored, which will cause serious logic errors

Lines of code Vulnerability details Impact All data minted by the contract will not be stored, paralyzing the entire contract Proof of Concept code snippet： function mintaddress nftContract, uint256 nftID external uint256 tokenId = ++numMinted; if ERC721nftContract.ownerOfnftID != msg.sender reve...