CVE-2022-22557

PowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments running versions 2.0.0.x and 2.0.1.x A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use...

Default credentials

PowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments running versions 2.0.0.x and 2.0.1.x A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use...

Default credentials

Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulnerability when certain off-array tools are run on the system. The credentials of a user with high privileges are stored in plain text. A local malicious user with high privileges...

CVE-2022-29085

Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 contain a plain-text password storage vulnerability when certain off-array tools are run on the system. The credentials of a user with high privileges are stored in plain text. A local malicious user with high privileges...

CVE-2022-29085

CVE-2022-29085 affects Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173. The issue is a plain-text password storage vulnerability in which credentials of a high-privilege user are stored in plain text when certain off-array tools run on the system. A local high-privile...

CVE-2022-22557

Dell PowerStore X & T appliances (PowerStore) are affected by CVE-2022-22557, with vulnerable components involving plain-text password storage in versions 2.0.0.x and 2.0.1.x. The issue enables a locally authenticated attacker to disclose certain user credentials, who may use exposed credentials ...

CVE-2022-22557

PowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments running versions 2.0.0.x and 2.0.1.x A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use...

Security Bulletin: IBM Spectrum Protect Plus may disclose sensitive information in virgo log file (CVE-2022-22396)

Summary IBM Spectrum Protect Plus may disclose credentials in clear text in the virgo log file. Vulnerability Details CVEID:CVE-2022-22396 DESCRIPTION: Credentials are printed in clear text in the IBM Spectrum Protect Plus virgo log file in certain cases. Credentials could be the remote vSnap,...

CVE-2022-24241

ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp...

CVE-2021-42203

An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swfFontExtractDefineTextCallback located in swftext.c. It allows an attacker to cause code execution...

CVE-2021-42203

An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swfFontExtractDefineTextCallback located in swftext.c. It allows an attacker to cause code execution...

CVE-2021-42199

An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swfFontExtractDefineTextCallback located in swftext.c. It allows an attacker to cause code execution...

UBUNTU-CVE-2021-42203

An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swfFontExtractDefineTextCallback located in swftext.c. It allows an attacker to cause code execution...

UBUNTU-CVE-2021-42199

An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swfFontExtractDefineTextCallback located in swftext.c. It allows an attacker to cause code execution...

OESA-2022-1693 python-XStatic-jquery-ui security update

jquery-ui javascript library packaged for setuptools easyinstall / pip. This package is intended to be used by any project that needs these files. It intentionally does not provide any extra code except some metadata nor has any extra requirements. You MAY use some minimal support code from the...

Swftools 缓冲区错误漏洞

Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in function swfFontExtractDefineTextCallback located in swftext.c. The vulnerability is cause...

PT-2022-15525 · Dell · Powerstore

Name of the Vulnerable Software and Affected Versions: PowerStore versions 2.0.0.x through 2.0.1.x Description: The issue is related to plain-text password storage in PowerStore X & T environments. A locally authenticated attacker could exploit this, leading to the disclosure of certain user...

Delta Controls enteliTOUCH 安全漏洞

Delta Controls enteliTOUCH is a touchscreen building controller from Delta Controls Canada. A security vulnerability exists in Delta Controls enteliTOUCH versions 3.40.3935, 3.40.3706, and 3.33.4005, which originates from transmitting and storing sensitive information in clear text. An attacker...

多款Dell产品安全漏洞

Dell UnityVSA and others are products of Dell USA.Dell UnityVSA is a set of virtual Unity storage environments.Dell Unity is Dell UnityXT is A security vulnerability exists in Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to 5.2.0.0.5.173 that stems from the inclusion of a plain tex...

Swftools 资源管理错误漏洞

Swftools is a set of utilities for working with Adobe Flash files SWF files. A post-release use vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap-based post-release reuse issue in the function swfFontExtractDefineTextCallback located in swftext.c. The...