Lucene search
+L

532 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/15 12:00 a.m.•1 views

CVE-2023-32784: Cleartext Transmission of Sensitive Information

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

7.5CVSS7.5AI score0.04397EPSS
SaveExploits5References3
Cvelist
Cvelist
•added 2023/05/15 12:00 a.m.•43 views

CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

7.7AI score0.04397EPSS
SaveExploits5References3
Positive Technologies
Positive Technologies
•added 2023/05/15 12:00 a.m.•13 views

PT-2023-3057

Name of the Vulnerable Software and Affected Versions KeePass versions prior to 2.54 Description An issue exists in the password manager's password input text field where credentials may be stored in unencrypted form. This could allow a remote attacker to recover the master password in cleartext...

7.8CVSS7.7AI score0.04397EPSS
SaveExploits5References59
Debian CVE
Debian CVE
•added 2023/05/15 12:00 a.m.•48 views

CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

7.5CVSS7.6AI score0.04397EPSS
SaveExploits5
attackerkb
attackerkb
•added 2023/05/15 12:00 a.m.•134 views

CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

7.5CVSS7.7AI score0.04397EPSS
SaveIn wildExploits5References6
CVE
CVE
•added 2023/05/15 12:00 a.m.•342 views

CVE-2023-32784

KeePass 2.x before 2.54 is vulnerable to master password exposure from memory dumps (KeePass process dumps, pagefile.sys, hibernation files, or RAM). The first character cannot be recovered, but subsequent characters may be revealed due to memory handling in KeePass. KeePass 2.54 introduces mitig...

7.5CVSS7.6AI score0.04397EPSS
SaveIn wildExploits5References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/15 12:00 a.m.•9 views

CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

7.6AI score0.04397EPSS
SaveExploits5References3
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•48 views

K00183056: Samba vulnerability CVE-2017-12163

Security Advisory Description An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer,...

7.1CVSS6.1AI score0.0759EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 6:20 a.m.•16 views

SUSE CVE-2004-0453

Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service emulator crash and possibly execute arbitrary code via format string specifiers in an output string...

7.2CVSS7.6AI score0.00433EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:42 a.m.•9 views

SUSE CVE-2017-12163

An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of serv...

5CVSS7.3AI score0.0759EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2023/02/15 4:25 a.m.•6 views

SUSE CVE-2018-14656

A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...

7CVSS6.3AI score0.00528EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/20 12:00 a.m.•6 views

CVE-2022-38112: Cleartext Storage of Sensitive Information

In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in cleartext...

7.5CVSS5.8AI score0.00416EPSS
SaveExploits0References3
Citrix
Citrix
•added 2022/08/16 12:00 a.m.•31 views

How to capture a full memory dump from a PVS target running on Azure

This article will cover the steps necessary to prepare an Azure VM running PVS to be able to capture a full memory dump...

7AI score
SaveExploits0
NVD
NVD
•added 2022/06/10 6:15 p.m.•30 views

CVE-2018-17240

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration e.g., username and password...

7.5CVSS0.03745EPSS
SaveExploits3References3
Prion
Prion
•added 2022/06/10 6:15 p.m.•30 views

Design/Logic Flaw

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration e.g., username and password...

5CVSS7.5AI score0.03745EPSS
SaveExploits3References3
CVE
CVE
•added 2022/06/10 5:03 p.m.•102 views

CVE-2018-17240

Netwave IP cameras are affected by CVE-2018-17240 due to a memory dump vulnerability at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive network configuration data (e.g., usernames and passwords). Public exploit details exist (Netwave exploit) showing how to dump confi...

7.5CVSS7.4AI score0.03745EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
•added 2022/06/10 5:03 p.m.•38 views

CVE-2018-17240

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration e.g., username and password...

7.5AI score0.03745EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/10 12:00 a.m.•6 views

CVE-2018-17240: Missing Release of Memory after Effective Lifetime

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration e.g., username and password...

7.5CVSS7.2AI score0.03745EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2022/06/10 12:00 a.m.•21 views

Netwave IP camera 安全漏洞

Netwave IP camera is a webcam from Netwave. A security vulnerability exists in Netwave IP camera, which originates from a memory dump issue in //proc/kcore. An unauthenticated attacker can use this vulnerability to steal sensitive information from the network configuration...

7.5CVSS7.3AI score0.03745EPSS
SaveExploits3References3
OSV
OSV
•added 2022/06/07 9:15 p.m.•16 views

CVE-2022-29620

FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability...

6.5CVSS5.8AI score0.01855EPSS
SaveExploits1References3
Rows per page
Query Builder