379 matches found
The vulnerability of the Cisco Elastic Services Controllers network management interface, related to errors in managing registration data, allows a perpetrator to gain access to the system with administrator privileges.
The vulnerability of the Cisco Elastic Services Controllers network management interface is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the system with administrator privileges...
The vulnerability of the UserFW component of the Junos operating system, which allows a hacker to gain access to the device
The vulnerability of the UserFW component used to facilitate easy implementation of user profiles through existing firewall policies in the Junos operating system exists due to the rigid encoding of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely...
The vulnerabilities of Azure cloud services include those related to BIG-IP Application Security Manager, a device for securing applications; BIG-IP Access Policy Manager, a device for controlling access and remote authentication; BIG-IP Link Controller, a device for balancing internet traffic; BIG-IP Policy Enforcement Manager, a device for controlling and managing network traffic; BIG-IP Local Traffic Manager, a device for balancing local traffic; BIG-IP DNS, a device for securing web services; BIG-IP WebSafe, a device for securing web services; BIG-IP Advanced Firewall Manager, a device for providing network firewalls; and BIG-IP Application Acceleration Manager, a device for accelerating application processing. These vulnerabilities allow attackers to gain access to the BIG-IP host.
The vulnerability in Azure’s application security protection services—BIG-IP Application Security Manager, BIG-IP Access Policy Manager for access control and remote authentication, BIG-IP Link Controller for Internet traffic balancing, BIG-IP Policy Enforcement Manager for network traffic contro...
The vulnerability of the Linux operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the klsi105getlinestate function in the Linux operating system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker acting locally to obtain confidential information...
The vulnerabilities of KW Multiprog and KW ProConOS in programming and debugging tools allow attackers to execute arbitrary commands.
The vulnerability of KW Multiprog and KW ProConOS programming and debugging tools is related to errors in managing registration data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the PLK configuration protocol...
The vulnerability of the Android operating system, which allows a hacker to change the screen lock password
The vulnerability of the server/LockSettingsService.java script of the LockSettingsService component in the Android operating system is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating locally, to change the screen lock passwo...
The vulnerability of the WebSphere MQ message processing service allows attackers to escalate their privileges.
The vulnerability of the WebSphere MQ messaging service is related to errors in the management of registration data. Exploiting this vulnerability can allow a malicious actor, operating locally, to increase their privileges using the mqcertck tool...
The vulnerability of Fonality’s corporate telephony software allows a perpetrator to gain access to protected information.
The vulnerability of the Fonality corporate telephony software relates to the rigid encoding of registration data for FTP login records. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information via FTP or SSH connections...
The vulnerability of the software for managing devices in the OnCell Central Manager allows a hacker to gain administrator privileges.
The vulnerability of the login function in the RequestController class of the software tool for managing devices in the OnCell Central Manager network is related to the rigid encoding of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...
The vulnerability of the NX-OS network operating system allows a hacker to gain superuser privileges.
The vulnerability of the NX-OS network operating system exists due to the rigid encoding of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain superuser privileges through TELNET or SSH sessions...
The vulnerability of the Signage Station presentation preparation program and the iArtist Lite presentation preparation utility, which allows a intruder to access protected information
The vulnerability of the Signage Station presentation preparation service and the iArtist Lite presentation preparation utility exists due to the rigid encoding of registration data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected informatio...
The vulnerability of the WebSphere MQ message processing service, which allows a hacker to obtain confidential information
The vulnerability of the MQXR component of the WMQ Telemetry service in the WebSphere MQ processing system lies in the fact that registration data is stored in an open text file. Exploiting this vulnerability could allow a local attacker to obtain confidential information...
The vulnerability of the Windows operating system, which allows a perpetrator to bypass the authentication process
The vulnerability of the Kerberos component of the Windows operating system is related to errors in managing registration data. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures locally...
The vulnerability of microprogrammed software in programmable logic controllers PCD allows a intruder to gain administrator privileges.
The vulnerability of PCD programmable logic controllers’ microprogramming software exists due to the rigid encoding of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain administrator privileges through an FTP session...
The vulnerability of L-Switch and L-IP router microprogramming systems allows attackers to gain access to backup files containing password hashes.
The vulnerability of L-Switch and L-IP router microprogramming systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to backup files containing hashed passwords...
The vulnerability of the Apache ActiveMQ software platform, which allows a hacker to obtain user credentials
The vulnerability of the LDAPLoginModule implementation and the Java Authentication and Authorization Service components of the Apache ActiveMQ software platform is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to...
The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to bypass the passwords of unauthorized users.
The vulnerability in the web-based administration interface of Cisco TelePresence Video Communication Server software is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor to reset the passwords of arbitrary users remotely...
The vulnerability of the microprogrammed software of the LifeCare PCA Infusion System allows a perpetrator to compromise the security of the protected information.
The vulnerability of the microprogrammed medical device LifeCare PCA Infusion System is related to errors in managing registration data. Exploiting this vulnerability could allow an intruder, operating locally, to compromise the security of protected information due to the storage of closed keys...
The vulnerability of the Cisco Unified Meetingplace Web Conferencing control program allows a intruder to bypass arbitrary passwords.
The vulnerability of the password-changing subsystem of the Cisco Unified Meetingplace Web Conferencing control software is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor to reset arbitrary passwords due to the lack of additional check...