8 matches found
PT-2018-6344
Name of the Vulnerable Software and Affected Versions: Photo,Video Locker-Calculator version 12.0 Description: The issue allows attackers to obtain sensitive cleartext information. This can be achieved via an "adb backup" command. Recommendations: For version 12.0, consider setting...
PT-2016-5299
Name of the Vulnerable Software and Affected Versions IBM Connections versions 4.0 through 5.0 before CR4 Description The issue allows remote attackers to obtain sensitive cleartext information by sniffing the network, as the software does not require SSL. Recommendations For versions 4.0 through...
F5 Networks BIG-IP : OpenSSL vulnerability (K93600123)
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session, NOTE: this vulnerability...
OpenSSL Padding Oracle Information Disclosure (CVE-2016-2107)
An information disclosure vulnerability exists in the AES-NI implementation of OpenSSL. The vulnerability is due to memory allocation miscalculation during a certain padding check. A remote attacker can exploit this vulnerability to obtain sensitive cleartext information via a padding-oracle atta...
CVE-2014-8709
The ieee80211fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets...
CVE-2014-8709
The ieee80211fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets...
CVE-2014-0863
The client in IBM Cognos TM1 9.5.2.3 before IF5, 10.1.1.2 before IF1, 10.2.0.2 before IF1, and 10.2.2.0 before IF1 stores obfuscated passwords in memory, which allows remote authenticated users to obtain sensitive cleartext information via an unspecified security tool...