26759 matches found
PT-2025-5730 · F5 · Big-Ip +1
Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an...
The vulnerability of the FactoryTalk AssetCentre software, a centralized asset management system, is related to insufficiently secure data encryption. This allows attackers to disclose sensitive information that should be protected.
The vulnerability of the FactoryTalk AssetCentre software for centralized asset management is related to insufficiently secure data encryption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...
CVE-2024-39866
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with...
CVE-2024-0323
The FTP server used on the B Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients...
CVE-2024-26288
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected...
PT-2025-2644 · Ibm · Ibm Security Verify Access Appliance +1
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance and Container versions 10.0.0 through 10.0.8 Description: The issue involves the transmission of sensitive or security-critical data in cleartext in a communication channel that can be detected by...
PT-2025-6824
Name of the Vulnerable Software and Affected Versions Brocade SANnav affected versions not specified Description Under certain error conditions during SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav supportsave. An attacker with privileged...
CVE-2024-49840
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...
CVE-2024-49840
CVE-2024-49840 is described as a memory corruption issue in Qualcomm chipsets that occurs when user-space IOCTL calls are used to validate FIPS encryption/decryption. The affected component is the Qualcomm chipset stack; the underlying cause is memory corruption triggered during IOCTL invocation....
CVE-2024-49840 Use of Out-of-range Pointer Offset in WLAN Windows Host
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...
CVE-2024-49840 Use of Out-of-range Pointer Offset in WLAN Windows Host
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...
WhatsApp says Paragon is spying on specific users
WhatsApp has accused the professional spyware company Paragon of spying on a select group of users. WhatsApp, the Meta-owned, end-to-end encrypted messaging platform, said it has reliable information that nearly 100 journalists and other “members of civil society” were targets of a spyware campai...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an IOCTL call is invoked from user space to verify FIPS encryption or decryption functionality...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a denial of service when the modem receives a registration acceptance OTA with an incorrect encryption key data IE...
The vulnerability of the Defender Sensor component of the IBM Storage Defender Data Resiliency Service (DRS) protection tool allows a attacker to execute a “man-in-the-middle” type attack.
The vulnerability of the Defender Sensor component of the IBM Storage Defender Data Resiliency Service DRS protection tool is related to improper data encryption. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” type attack...
AMD SEV-SNP 安全漏洞
AMD SEV-SNP is a secure encrypted virtualization firmware from UltraMicroelectronics AMD. A single key is used to encrypt system memory. A security vulnerability exists in AMD SEV-SNP that stems from incorrect signature verification...
CVE-2024-53356
Weak JWT Secret vulnerabilitiy in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as "somerandomaccesstoken". A weak HMAC secret poses a risk because attackers can use the...
CVE-2024-53357
Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote authenticated attackers, with low privileges, to 1 add an admin user via the /api/user/addalias route; 2 modifiy a user via the /api/user/updatealiasroute; 4 delete users via the /api/user/delali...
EasyVirt DC Scope和EasyVirt CO2 Scope 安全漏洞
EasyVirt DC Scope and EasyVirt CO2 Scope are both products of the French company EasyVirt.EasyVirt DC Scope is a monitoring and management solution for VMware Virtualization VMware.EasyVirt CO2 Scope is a real-time monitoring and control solution for IT services, virtual machines and servers in...