CVE-2023-37291: Use of Hard-coded Cryptographic Key

Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter and exploit this vulnerability to access system to operate processes and access data. This issue affects Vitals ESP: from 3.0.8 through...

Improper Access Control

unboundid-ldapsdk is vulnerable to improper access control. The vulnerability exists due to the lack of check for password in the synchronous process operation found in SimpleBindRequest...