The vulnerability of the urllib.parse.urlsplit and urllib.parse.urlparse functions in the Python interpreter allows a attacker to disclose protected information, read or write arbitrary data, or cause a denial-of-service attack.

The vulnerability of the urllib.parse.urlsplit and urllib.parse.urlparse functions in the Python interpreter is related to errors in handling registration data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, read or write arbitrary data, or cause service...

The vulnerability of the PowerSCADA Expert system for data collection and process control allows a perpetrator to gain access to user account information due to insufficient protection of registration data.

The vulnerability of the PowerSCADA Expert system for data collection and process control is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain access to user account information...

The vulnerability of the urllib3 module in the Python programming language, related to errors in handling registration data, allows attackers to disclose protected information.

The vulnerability of the urllib3 module in the Python programming language is related to errors in handling registration data. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this module...

PT-2019-2858 · Python +6 · Python +6

Name of the Vulnerable Software and Affected Versions: Python affected versions not specified Description: The issue is related to errors in handling registration data in the urllib.parse.urlsplit and urllib.parse.urlparse functions of the Python programming language interpreter. Exploitation of...

The vulnerability of the Junos operating system, related to errors in managing registration data, allows a hacker to alter the administrator’s password.

The vulnerability of the Junos operating system is related to errors in managing registration data. Exploiting this vulnerability could allow an attacker to change the administrator’s password root...

The vulnerability of the software tools for managing network resources, Junos Space Service Now and Junos Space Service Insight, is related to errors in managing registration data. This vulnerability allows an attacker to access account information stored in plain text.

The vulnerability of the Junos Space Service Now and Junos Space Service Insight software for managing network resources is related to errors in managing registration data. Exploiting this vulnerability can allow an attacker to access registered data stored in plaintext format...

The vulnerability of GNOME Keyring’s user name and password storage service, related to errors in managing registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GNOME Keyring’s user name and password storage service is related to errors in managing registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability in the Ansible Tower web interface of the configuration management tool is related to deficiencies in managing registration data, allowing a hacker to escalate their privileges.

The vulnerability in the Ansible Tower web interface, a tool for managing Ansible configurations, is related to deficiencies in the management of registration data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

PT-2019-2085 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 14.1X53-D49 Junos OS versions prior to 15.1F6-S12 Junos OS versions prior to 15.1R7-S3 Junos OS versions prior to 15.1X49-D160 Junos OS versions prior to 15.1X53-D236 Junos OS versions prior to 15.1X53-D495 Junos OS...

The vulnerability of the Jenkins automation server allows a hacker to reuse registration data or session identifiers for authentication purposes.

The vulnerability of the Jenkins automation server is related to incorrect session duration. Exploiting this vulnerability allows a malicious actor to repeatedly use registration data or session identifiers for authentication purposes...

The vulnerability of the Cisco Elastic Services Controller network management tool, which stems from the use of pre-installed registration data, allows a perpetrator to escalate their privileges.

The vulnerability of the Cisco Elastic Services Controller network management tool is related to the use of pre-installed registration data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability in the get_getnetworkconf.cgi script of the Orange Livebo wireless router’s microprogramming software allows a attacker to gain access to protected information.

The vulnerability in the getgetnetworkconf.cgi script of the wireless router’s microprogramming system is caused by a error in the management of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information using the HTTP...

The vulnerability of the microprogrammed software of the Cisco Aironet Active Sensor wireless client detection device arises from the use of pre-installed registration data. This allows a malicious actor to cause service failures.

The vulnerability of the microprogrammed software of the Cisco Aironet Active Sensor wireless client sensor lies in the use of pre-installed registration data. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the COM.MICROSOFT.WEBSERVICE component in the LibreOffice office software package allows a hacker to gain access to protected information.

The vulnerability of the COM.MICROSOFT.WEBSERVICE component in the LibreOffice office software package is related to deficiencies in the management of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through ...

The vulnerability of the Juniper ATP intrusion prevention system allows a intruder to elevate their privileges and execute arbitrary code.

The vulnerability of the Juniper ATP intrusion prevention system lies in the storage of pre-installed registration data in a file. Exploiting this vulnerability allows a remote attacker to increase their privileges and execute arbitrary code...

The vulnerability of the Juniper ATP intrusion prevention system allows a intruder to elevate their privileges and execute arbitrary code.

The vulnerability of the Juniper ATP intrusion prevention system lies in the use of pre-installed registration data. Exploiting this vulnerability allows a remote attacker to enhance their privileges and execute arbitrary code...

PT-2018-3942 · D Link · D-Link Dcs Series Wi-Fi Cameras

Name of the Vulnerable Software and Affected Versions: D-Link DCS series Wi-Fi cameras versions 1.00 and above Description: The issue is related to insufficient protection of registration data in the common/info.cgi component of D-Link DCS series Wi-Fi cameras' firmware. This can allow a remote...

NEC Aterm WF1200CR and Aterm WG1200CR Information Disclosure Vulnerability

The NEC Aterm WF1200CR and Aterm WG1200CR are both router products from Nippon Electric NEC. An information disclosure vulnerability exists in the NEC Aterm WF1200CR with firmware version 1.1.1 and earlier and the Aterm WG1200CR with firmware version 1.0.1 and earlier, which can be exploited by a...

ThreatList: Almost All Security Pros Believe Election Systems Are at Risk

As the U.S. midterm election season gets underway in earnest, concerns about the ability to hack the vote is more in the spotlight than ever. A fresh survey from Venafi has found that a full 93 percent of security pros are concerned about cyber-attacks targeting election infrastructure. The poll,...

The vulnerability of the microprogrammed software for Micrologix 1100 and Micrologix 1400, related to errors in managing registration data, allows a hacker to obtain user credentials.

The vulnerability of the microprogrammed logic controllers Micrologix 1100 and Micrologix 1400 lies in the fact that user credentials are sent to the web server using the HTTP GET method. Exploiting this vulnerability allows a malicious actor to obtain users’ credentials remotely...