9000 matches found
D-Link DIR-815 Information Disclosure Vulnerability (CNVD-2018-15272)
D-Link DIR-815 is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DIR-815 using firmware prior to version 2.07.B01, which stems from a program storing wireless keys in plaintext form. A remote attacker could exploit the vulnerability to obtain sensitive...
D-Link DIR-815 Information Disclosure Vulnerability
D-Link DIR-815 is a wireless router product from AUO D-Link. An information disclosure vulnerability exists in the D-Link DIR-815 with firmware prior to version 2.07.B01, which originates from the program storing the administrative password in plaintext. A remote attacker could exploit this...
CentOS 7 : thunderbird (CESA-2018:1725)
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
CVE-2018-1241
Dell EMC RecoverPoint products prior to 5.1.2 and RecoverPoint for VMs prior to 5.1.1.3 leak LDAP passwords in plaintext to log files when LDAP login occurs; an authenticated attacker with log access can misuse exposed credentials. No exploitation details are provided in the connected documents. ...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Thunderbird vulnerabilities (USN-3660-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3660-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a...
Researchers Defeat AMD's SEV Virtual Machine Encryption
German security researchers claim to have found a new practical attack against virtual machines VMs protected using AMD's Secure Encrypted Virtualization SEV technology that could allow attackers to recover plaintext memory data from guest VMs. AMD's Secure Encrypted Virtualization SEV technology...
Researchers Defeat AMD's SEV Virtual Machine Encryption
German security researchers claim to have found a new practical attack against virtual machines VMs protected using AMD's Secure Encrypted Virtualization SEV technology that could allow attackers to recover plaintext memory data from guest VMs. AMD's Secure Encrypted Virtualization SEV technology...
USN-3660-1: Thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service via application crash, install lightweight themes without user interaction, or...
RHEL 6 : thunderbird (RHSA-2018:1726)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1726 advisory. - Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 CVE-2018-5150 - Mozilla: Use-after-free with SVG animations and clip...
Dell EMC RecoverPoint and RecoverPoint for Virtual Machines Information Disclosure Vulnerability
Dell EMC RecoverPoint and RecoverPoint for Virtual Machines are both products of Dell Dell. The former is a suite of disaster recovery and data protection software, and the latter is a disaster recovery solution for VMware environments. An information disclosure vulnerability exists in Dell EMC...
Mozilla: Leaking plaintext through HTML forms
Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...
Mozilla: Encrypted mail leaks plaintext through src attribute
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...
Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack
Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...
Mozilla: Leaking plaintext through HTML forms
Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...
Mozilla: Encrypted mail leaks plaintext through src attribute
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...
Teen monitoring app exposes plaintext Apple ID passwords of its users
By Uzair Amir A popular teen monitoring app has become a victim of a This is a post from HackRead.com Read the original post: Teen monitoring app exposes plaintext Apple ID passwords of its users...
Joomla! Core Information Disclosure Vulnerability (CNVD-2018-15240)
Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. A trust management vulnerability exists in Joomla! Core versions prior to 3.8.8, which stems from the web installation application...
CVE-2018-5185
Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...
