13159 matches found
Insufficiently Protected Credentials and Improper Authentication in Spring Security
Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an application using an affected version of Spring Security is leveraging PlaintextPasswordEncoder and a user has a null encoded password, a malicious user ...
The vulnerability of the Open Cloud Integrity Technology, a tool for creating cloud services, stems from password handling flaws during system login processes. This allows attackers to compromise the protected information.
The vulnerability of the Open Cloud Integrity Technology, a tool used for creating cloud services, is related to deficiencies in password handling during system login processes. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by this...
The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, and the OpenAttestation agent, arises from password handling issues during system login processes. This allows attackers to compromise the protected information.
The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, and the OpenAttestation agent are related to password handling deficiencies during system login processes. Exploiting these vulnerabilities can allow attackers to disclose sensitive information that ...
The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information
The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created document or web page...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information
The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...
The vulnerability of the built-in software in Intel NUC Kits relates to reading data beyond the buffer in memory. This allows attackers to access protected information, cause system failures, or gain increased privileges.
The vulnerability of the built-in software in the Intel NUC Kit arises from reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to access protected information, cause system failures, or increase their privileges...
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the built-in software in Intel NUC Kits relates to reading data beyond the buffer in memory. This allows attackers to access protected information, cause system failures, or gain increased privileges.
The vulnerability of the built-in software in the Intel NUC Kit arises from reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to access protected information, cause system failures, or increase their privileges...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network (EPN) Manager software, relates to errors in handling HTTP requests. This vulnerability allows an attacker to gain access to protected information.
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network EPN Manager software relates to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to gain access to protected...
The vulnerability of the OpenAttestation agent, related to errors in the implementation of the host attestation process, allows a violator to disclose the protected information.
The vulnerability of the OpenAttestation technology is related to errors in the process of hosting attestation. Exploiting this vulnerability can allow attackers to disclose the protected information...
The vulnerability of the Open Cloud Integrity Technology, a tool for creating cloud services, is related to the “race-to-availability” scenario, which allows a attacker to expose protected information.
The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, stems from a “race-to-obtain” situation. Exploiting this vulnerability could allow an attacker to disclose protected information...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network (EPN) Manager software, relates to errors in handling HTTP requests. This vulnerability allows an attacker to gain access to protected information.
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network EPN Manager software relates to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to gain access to protected...
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the built-in software in Intel NUC Kits relates to improper session management. This allows attackers to gain access to protected information, cause system failures, or enhance their privileges.
The vulnerability of the built-in software in the Intel NUC Kit is related to improper session management. Exploiting this vulnerability can allow an attacker to access protected information, cause service failures, or increase their privileges...
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of Pelco Endura video server microprogramming software, related to access control errors, allows intruders to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Pelco Endura video server microprogramming software is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of protected information by using specially...
The vulnerability of the software for updating Intel Driver & Support Assistant, related to access control deficiencies, allows a hacker to disclose protected information.
The vulnerability of the Intel Driver & Support Assistant software for updating drivers is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the EnterpriseDB database management system’s installer allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the EnterpriseDB database management system’s installer relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...