DELL Dell EMC Unity和UnityVSA 日志信息泄露漏洞

Dell EMC Unity is a unified storage array product. the UnityVSA is a set of virtual Unity storage environments. An information disclosure vulnerability exists in Dell EMC Unity, Unity XT and UnityVSA versions prior to 5.0.4.0.5.012. The vulnerability stems from the program storing user credential...

Dell EMC Unity,UnityVSA 安全漏洞

DELL Dell EMC Unity and UnityVSA are both products of Dell DELL Corporation, U.S.A. Dell EMC Unity is a unified storage array product.UnityVSA is a set of virtual Unity storage environments. A security vulnerability exists in Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012,...

Dell EMC PowerStore 信息泄露漏洞

The Dell EMC PowerStore is a storage device from Dell USA. A security vulnerability exists in Dell EMC PowerStore versions prior to version 1.0.3.0.5.007, which stems from a storage vulnerability containing a plaintext password. A locally authenticated attacker could exploit the vulnerability to...

Dell EMC PowerStore 安全漏洞

The Dell EMC PowerStore is a storage device from Dell USA. An information disclosure vulnerability exists in Dell EMC PowerStore versions prior to 1.0.3.0.5.007. The vulnerability stems from the program storing passwords in plaintext. An authenticated, local attacker could exploit the vulnerabili...

parse-server encryption issue vulnerability

parse-server is an open source Backend-as-a-Service BaaS framework , it is mainly used for application back-end processing . A security vulnerability exists in Parse Server versions prior to 4.5.0 that stems from LDAP authentication involving user passwords stored in plaintext. No details of the...

CVE-2019-25005

An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for attackers to determine plaintext...

CVE-2019-25005

An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for attackers to determine plaintext...

Design/Logic Flaw

An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for attackers to determine plaintext...

CVE-2019-25005

The CVE-2019-25005 issue affects the Rust chacha20 crate prior to 0.2.3. A 32‑bit ChaCha20 counter overflow can cause keystream repetition, making it easier for an attacker to determine plaintext. Public references describe the vulnerability and the fix: upgrading to version 0.2.3 (hot fix) where...

CVE-2019-25005

An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for attackers to determine plaintext...

CVE-2020-15685

During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird 78.7...

UBUNTU-CVE-2020-15685

During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird 78.7...

parse-server 加密问题漏洞

parse-server is an open source Backend-as-a-Service BaaS framework , it is mainly used for application back-end processing . A security vulnerability exists in Parse Server versions prior to 4.5.0 that stems from LDAP authentication involving user passwords stored in plaintext. No details of the...

NCH Express Accounts Security Vulnerability

NCH Express Accounts Accounting is a business accounting software. The software includes features such as financial income and expense management, financial analysis and reporting. A security vulnerability exists in NCH Express Accounts version 8.24 and prior versions that allows local users to...

Timing Attack

tlslite-ng is vulnerable to information disclosure. An RSA weakness that leaks information about the decrypted ciphertext such as the bit length of the decrypted message as well as where the first unexpected byte lays, allows an attacker to determine information about the plaintext...

Serious vulnerability fixed in Zyxel products

A vulnerability has been fixed in Zyxel products. A researcher found an undocumented user whose both the username and password could be found in plaintext were in firmware. This undocumented account has admin rights. Zyxel has released updates to fix the vulnerability. Zyxel indicated that for AP...

Urve Information Disclosure Vulnerability

Urve is a device for booking meeting rooms/rooms from Urve UK. The device supports integration with MS Exchange, Lotus, Office 365, Google Calendar and other systems to support meeting room and guest room reservations. A security vulnerability exists in URVE Build 24.03.2020, which arises when th...

Zyxel USG Series Encryption Issues Vulnerabilities

The Zyxel USG Series is a series of firewall devices from Zyxel, China, for use in corporate environments. A security vulnerability exists in Zyxel USG devices Firmware version 4.60, which stems from the inclusion of an undocumented account zyfwp and an unchangeable password. The password for thi...

Apache Airflow logs passwords in plaintext

In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. The same happenes when creating a Connection with a password field...

GHSA-CVCQ-GMC3-Q6M8 Apache Airflow logs passwords in plaintext

In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. The same happenes when creating a Connection with a password field...