13137 matches found
The vulnerability of the user management utilities useradd and adduser in the operating system “OSnova” lies in the use of insecure default settings, which allow attackers to gain access to protected information.
The vulnerability of the user management utilities useradd and adduser in the operating system is related to the use of insecure default settings. Exploiting this vulnerability can allow an attacker to gain access to protected information...
Rockwellautomation Rslogix Insufficiently Protected Credentials
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...
The vulnerability of the Red Hat OpenShift Container Platform corporate platform, related to errors in authentication procedures, allows a perpetrator to gain access to protected information.
The vulnerability of the Red Hat OpenShift Container Platform is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to protected information remotely...
Siemens Simatic Insufficiently Protected Credentials
A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 CPU family incl. SIPLUS variants All versions, SIMATIC WinAC RTX F 2010 All versions, SINUMERIK 840D sl All versions. The authentication protocol between a...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9404)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9404 advisory. - seqfile: disallow extremely large seq buffer allocations Eric Sandeen Orabug: 33135632 CVE-2021-33909 - Bluetooth: fix the erroneous flushwork...
PT-2021-3830 · Microsoft · Windows Services For Nfs +1
Name of the Vulnerable Software and Affected Versions: Windows Services for NFS affected versions not specified Description: The issue is related to insufficient protection of service data, which can be exploited by a remote attacker to gain unauthorized access to protected information. This can...
The vulnerability of the ARM SIGPAGE function in Linux kernels, which allows attackers to gain access to protected information
The vulnerability of the ARM SIGPAGE function in Linux kernels relates to the possibility of using an uninitialized resource. Exploiting this vulnerability can allow an attacker to gain access to protected information...
The vulnerability of the Elastic Cloud Enterprise analytics platform, related to security configuration errors, allows a perpetrator to gain access to protected information.
The vulnerability of the Elastic Cloud Enterprise analytics platform is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...
The vulnerability of the integration function of the Cisco Identity Services Engine, a component of the Cisco Digital Network Architecture (DNA) Center, related to errors in the certificate validation process, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Cisco Identity Services Engine, a platform for managing network policies, is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is released. These vulnerabilities allow attackers to gain unauthorized access to protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to gain...
The vulnerability of the “Blockhost-Net” information protection software allows a perpetrator to gain access to the protected information.
The vulnerability of the GIS.BlockPost.GUI application, a software tool for information protection, is related to the use of a symmetric encryption key defined in the program code. Exploiting this vulnerability could allow an attacker to decrypt files containing information about the program’s...
The vulnerability of the microprogrammed IP cameras from Bosch, models CPP6 UHD/MP, CPP7 UHD/MP, and CPP7.3 UHD/MP, is related to the absence of authentication procedures. This allows intruders to gain unauthorized access to protected information or alter settings.
The vulnerability of the microprogrammed IP cameras from Bosch, models CPP6 UHD/MP, CPP7 UHD/MP, and CPP7.3 UHD/MP, is related to the absence of authentication procedures for critical functions. Exploiting this vulnerability can allow an unauthorized person to gain unauthorized access to protecte...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to...
The vulnerability of the command-line interface (CLI) of the FortiAuthenticator system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the command-line interface CLI of the FortiAuthenticator system is related to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to protected information...
The vulnerability of the DevTools set of tools for web development in the Google Chrome web browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the DevTools suite for web development in the Google Chrome web browser relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by opening a specially created malicious web...
CVE-2021-20597
Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a...
The vulnerability of Microsoft Edge browser, related to the lack of protection for service data, allows attackers to disclose protected information.
The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created file...
The vulnerability of the Compositing component in the Google Chrome web browser for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Compositing component in the Google Chrome web browser for Windows operating systems is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information throug...
The vulnerability in the Google Chrome web browser, related to the use of memory after it is freed, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created malicious web page...
