8948 matches found
CVE-2021-21270
CVE-2021-21270 affects OctopusDSC (PowerShell DSC resources) where, in versions up to 4.0.977, a customer API key used to connect to the Octopus Server is logged in plaintext. The issue is resolved by upgrading to version 4.0.1002. The connected sources confirm the affected component, root cause ...
Octopus DSC Security Breach
Octopus DSC is a PowerShell module with DSC resources that can be used to install and configure Octopus Deploy servers and reach agents. A security vulnerability exists in Octopus DSC version 4.0.977 and earlier, which stems from a vulnerability that allows client API keys used to connect to the...
Cisco DNA Center Information Disclosure Vulnerability (CNVD-2021-05393)
Cisco DNA Center is the network management and command center for Cisco DNA. An information disclosure vulnerability exists in the Configuration Archiving feature in Cisco DNA Center versions prior to 2.1.2.0. The vulnerability stems from the fact that configuration archive files are stored in...
Cisco DNA Center 安全漏洞
Cisco DNA Center is the network management and command center for Cisco DNA. An information disclosure vulnerability exists in the Configuration Archiving feature in Cisco DNA Center versions prior to 2.1.2.0. The vulnerability stems from the fact that configuration archive files are stored in...
CVE-2021-0212
An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...
CVE-2021-0212
An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...
Information disclosure
An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...
CVE-2021-0212 Contrail Networking: Administrator credentials are exposed in a plaintext file
An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...
IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2021-03531)
IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.2. The vulnerability stems from the product...
Cisco Firepower Management Center 信息泄露漏洞
Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. An information disclosure vulnerability exists in the storage of...
IBM Security Guardium Insights 安全漏洞
IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.2. The vulnerability stems from the product...
D-link DSL-2888A 安全漏洞
The D-link DSL-2888A is a Unified Services Router from China AUO D-link. An information disclosure vulnerability exists in D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55, which originates from the disclosure of sensitive information in the response body, such as hashed admin...
Dell EMC PowerStore Information Disclosure Vulnerability
The Dell EMC PowerStore is a storage device from Dell USA. A security vulnerability exists in Dell EMC PowerStore versions prior to version 1.0.3.0.5.007, which stems from a storage vulnerability containing a plaintext password. A locally authenticated attacker could exploit the vulnerability to...
Dell EMC Unity and UnityVSA Elevation of Privilege Vulnerability
DELL Dell EMC Unity and UnityVSA are both products of Dell DELL Corporation, U.S.A. Dell EMC Unity is a unified storage array product.UnityVSA is a set of virtual Unity storage environments. A security vulnerability exists in Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012,...
Mozilla Rust Buffer Overflow Vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in chacha20 crate in Mozilla Rust versions prior to 0.2.3, which stems from a ChaCha20 counter overflow that can be exploited by an attacker to determine plaintext...
CVE-2020-23249
GigaVUE-OS GVOS 5.4 - 5.9 stores a Redis database password in plaintext...
CVE-2020-23249
GigaVUE-OS GVOS 5.4 - 5.9 stores a Redis database password in plaintext...
Design/Logic Flaw
GigaVUE-OS GVOS 5.4 - 5.9 stores a Redis database password in plaintext...
CVE-2020-23249
CVE-2020-23249 affects GigaVUE-OS (GVOS) versions 5.4–5.9, where the Redis database password is stored in plaintext. The root cause is insecure storage of the Redis password, which could allow an attacker to obtain the database password and potentially perform further attacks. The connected docum...