Dell Update Manager Plugin 安全漏洞

Dell Update Manager Plugin is an update management plugin from Dell USA. A security vulnerability exists in Dell Update Manager Plugin versions 1.4.0 through 1.5.0, which stems from a log file containing plain text passwords, resulting in the disclosure of certain user credentials...

PT-2024-19296

Name of the Vulnerable Software and Affected Versions VMware Avi Load Balancer affected versions not specified Description The issue concerns an information disclosure problem where a malicious actor with access to the system logs can view cloud connection credentials in plaintext. Recommendation...

CVE-2024-23551

Database scanning using username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk. This will lead to exposure of sensitive information for unauthorized access, potentially leading to severe...

CVE-2024-23551

HCL BigFix Compliance (9.x–11.x) is affected by CVE-2024-23551 due to database scanning using a username/password that stores credentials in plaintext or encoded form on the endpoint. This can lead to unauthorized access and data exposure. Prior to a confirmed patch (not provided in the documents...

CVE-2024-23551 HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint

Database scanning using username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk. This will lead to exposure of sensitive information for unauthorized access, potentially leading to severe...

CVE-2024-23551 HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint

Database scanning using username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk. This will lead to exposure of sensitive information for unauthorized access, potentially leading to severe...

HCL BigFix Compliance 安全漏洞

HCL Technologies HCL BigFix Compliance is a continuous monitoring and application of endpoint security settings to ensure compliance with regulatory or organizational security policies by HCL Technologies, USA. A security vulnerability exists in HCL BigFix Compliance versions prior to 10.0.5.0,...

PT-2024-19934 · Hcl · Hcl Bigfix Compliance

Name of the Vulnerable Software and Affected Versions: HCL BigFix Compliance versions 9.x through 11.x Description: Database scanning using a username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant securit...

SUSE SLES15 Security Update : curl (SUSE-SU-2024:1151-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1151-2 advisory. - CVE-2024-2004: Fix the uUsage of disabled protocol logic. bsc1221665 - CVE-2024-2398: Fix HTTP/2 push headers memory-leak...

[SECURITY] [DLA 3809-1] libkf5ksieve security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3809-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk May 05, 2024 https://wiki.debian.org/LTS -...

FileCodeBox 安全漏洞

FileCodeBox is a file courier locker for vastsa personal developers. Files can be shared with an anonymous password. A security vulnerability exists in FileCodeBox version 2.0 that stems from allowing OneDrive passwords and AWS keys to be stored in plaintext environment files...

K000139508: rust-openssl vulnerability CVE-2024-3296

Security Advisory Description A timing-based side-channel flaw exists in the rust-openssl package, which could be sufficient to recover a plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of tria...

CVE-2023-40510

LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2023-40511

LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method...

CVE-2023-40511

LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method...

CVE-2023-40511

LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method...

CVE-2023-40510

LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2023-27370

NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability,...

CVE-2023-27370

NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability,...

CVE-2023-40511 LG Simple Editor checkServer Authentication Bypass Vulnerability

LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method...