Lucene search
+L

489 matches found

Vulnrichment
Vulnrichment
added 2024/09/04 4:29 p.m.18 views

CVE-2024-20503 Cisco Duo Epic for Hyperdrive Information Disclosure Vulnerability

A vulnerability in Cisco Duo Epic for Hyperdrive could allow an authenticated, local attacker to view sensitive information in cleartext on an affected system. This vulnerability is due to improper storage of an unencrypted registry key. A low-privileged attacker could exploit this vulnerability ...

5.5CVSS6.5AI score0.00108EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/04 4:29 p.m.40 views

CVE-2024-20503 Cisco Duo Epic for Hyperdrive Information Disclosure Vulnerability

A vulnerability in Cisco Duo Epic for Hyperdrive could allow an authenticated, local attacker to view sensitive information in cleartext on an affected system. This vulnerability is due to improper storage of an unencrypted registry key. A low-privileged attacker could exploit this vulnerability ...

5.5CVSS0.00108EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/04 4:29 p.m.70 views

CVE-2024-20503

CVE-2024-20503 affects Cisco Duo Epic for Hyperdrive. The root cause is improper storage of an unencrypted registry key, allowing a low-privileged, authenticated, local attacker to view sensitive information in cleartext on the affected system. Connected advisories confirm this is a local-informa...

5.5CVSS5.2AI score0.00108EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
added 2024/09/04 4:00 p.m.23 views

Cisco Duo Epic for Hyperdrive Information Disclosure Vulnerability

A vulnerability in Cisco Duo Epic for Hyperdrive could allow an authenticated, local attacker to view sensitive information in cleartext on an affected system. This vulnerability is due to improper storage of an unencrypted registry key. A low-privileged attacker could exploit this vulnerability ...

5.5CVSS5.2AI score0.00108EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/11 12:00 a.m.18 views

PT-2024-6530 · Cisco · Cisco Duo Epic For Hyperdrive

Name of the Vulnerable Software and Affected Versions: Cisco Duo Epic for Hyperdrive affected versions not specified Description: The issue is related to insufficient protection of service data, which could allow an authenticated, local attacker to view sensitive information in cleartext on an...

5.5CVSS6.5AI score0.00108EPSS
SaveExploits0References6
Qualys Blog
Qualys Blog
added 2024/07/30 12:50 p.m.44 views

Qualys Announces TruRisk Eliminate to Augment Patching

About 5 years ago, we launched Qualys Patch Management to empower our customers to not just detect and prioritize vulnerabilities but also effectively remediate them. Since then, we have assisted our customers in addressing hundreds of millions of vulnerabilities, significantly enhancing the...

8.8CVSS9AI score0.99792EPSS
SaveExploits56
Citrix
Citrix
added 2024/05/15 12:00 a.m.31 views

Unable to reconnect to disconnected session.

Attempts to reconnect to a session might fail and the session might disappear from Citrix Director. A new session is launched instead of reconnecting to the existing session. To enable the fix, set the following registry key: Session Manager terminates session launches when the Group Policy...

7AI score
SaveExploits0
CVE
CVE
added 2024/04/25 4:37 p.m.93 views

CVE-2024-28240

GLPI-Agent (Windows MSI install) is affected by CVE-2024-28240. A local user can cause denial of service by replacing the GLPI server URL or disabling the agent service, and if the Deploy task is installed, can trigger privilege escalation by configuring a malicious server with its own deploy tas...

7.8CVSS6.9AI score0.00224EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/03/06 5:15 p.m.8 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

5.5CVSS5.8AI score0.00109EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/06 5:15 p.m.29 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

5.5CVSS4.5AI score0.00109EPSS
SaveExploits0References1
Cisco
Cisco
added 2024/03/06 4:00 p.m.59 views

Cisco Duo Authentication for Windows Logon and RDP Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

4.4CVSS4.7AI score0.00109EPSS
SaveExploits0References1
Citrix
Citrix
added 2023/11/17 12:00 a.m.15 views

User profile settings are not saved with WEM

User profile saved settings are not saved. UPM or WEM settings are missing in the registry key locations following = HKLM/Software/Policies/Citrix/UserProfileManager HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Control\Norskale\Agent Host\UsvMachineConfigurationSettings...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2023/11/16 12:00 a.m.16 views

'Use server time zone' setting not getting applied through Studio policy

PVS Target Device - Use server time zone policy is not getting applied on server 2019 VDA. Citrix Policy "Use local time of client" is Configured. Value set to use time zone of user session server time zone. Registry key: HKEYLOCALMACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services...

7AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2023/10/10 7:00 a.m.149 views

October 10, 2023—KB5031377 (OS Build 10240.20232) - EXPIRED

None None...

9.8CVSS6.9AI score0.99999EPSS
SaveExploits21
ATTACKERKB
ATTACKERKB
added 2023/10/05 1:15 a.m.14 views

CVE-2023-26237

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM...

6.7CVSS5.9AI score0.0017EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/05 1:15 a.m.6 views

CVE-2023-26237

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM...

6.7CVSS5.8AI score0.0017EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/05 1:15 a.m.20 views

Design/Logic Flaw

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM...

4CVSS6.5AI score0.0017EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
added 2023/10/05 12:00 a.m.31 views

CVE-2023-26237

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM...

6.7AI score0.0017EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/05 12:00 a.m.47 views

CVE-2023-26237

CVE-2023-26237 affects WatchGuard EPDR 8.0.21.0002, where an attacker can bypass defensive capabilities by adding a registry key as SYSTEM. The issue is described as a local-impact bypass of protections, with CVSSv3.1 metrics indicating Local access, Low attack complexity, Privileges Required: Hi...

6.7CVSS6.4AI score0.0017EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/05 12:00 a.m.12 views

CVE-2023-26237

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a registry key as SYSTEM...

6.8AI score0.0017EPSS
SaveExploits0References1
Rows per page
Query Builder