Lucene search
K

23 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2011-4987

Malware in sbrugna...

5CVSS6.4AI score0.01293EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-7349

Malicious code in bioql PyPI...

4.9CVSS5.4AI score0.00357EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/08/04 11:25 p.m.3 views

SUSE CVE-2025-6624

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...

7.2CVSS7.1AI score0.00151EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.8 views

The vulnerability of the SCADA system TRACE MODE 7, related to the storage of confidential information in unencrypted form in memory, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the SCADA system TRACE MODE 7 relates to the storage of confidential information in unencrypted form in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected information...

3.3CVSS5.5AI score
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/13 6:6 p.m.9 views

CVE-2025-0071

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

4.9CVSS6.8AI score0.00357EPSS
Exploits0References1
NVD
NVD
added 2025/03/11 1:15 a.m.6 views

CVE-2025-0071

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

4.9CVSS0.00357EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/11 12:31 a.m.5 views

CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

4.9CVSS7.1AI score0.00357EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/11 12:31 a.m.8 views

CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

4.9CVSS0.00357EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.3 views

The vulnerability of the SCADA system TRACE MODE 7, related to the storage of confidential information in unencrypted form in memory, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the SCADA system TRACE MODE 7 relates to the storage of confidential information in unencrypted form in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected information...

5.5CVSS5.5AI score
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/15 12:0 a.m.4 views

PT-2024-2258 · Unknown · Trace Mode 7

Name of the Vulnerable Software and Affected Versions: TRACE MODE 7 affected versions not specified Description: The issue is related to the storage of confidential information in unencrypted form in memory. Exploitation of this issue could allow an attacker to gain unauthorized access to protect...

4.6CVSS7.1AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:0 a.m.3 views

The vulnerability of the TRACE MODE SCADA system, related to unencrypted storage of user credentials, allows a hacker to replace one user’s password hash with another and gain access to the SCADA system.

The vulnerability of the TRACE MODE SCADA system is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a perpetrator to replace the password hash for one user with that of another user and gain access to the SCADA system...

4.9CVSS5.5AI score
Exploits0Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:0 a.m.2 views

The vulnerability of the SCADA system TRACE MODE, related to unencrypted storage of user credentials, allows a intruder to alter user permissions.

The vulnerability of the SCADA system TRACE MODE is related to the unencrypted storage of user credentials. Exploiting this vulnerability can allow a intruder to alter user permissions in such a way that higher privileges are granted to the desired user...

4.9CVSS5.5AI score
Exploits0Affected Software2
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.3 views

PT-2023-7550 · Unknown · Trace Mode

Name of the Vulnerable Software and Affected Versions: TRACE MODE affected versions not specified Description: The issue is related to the storage of unencrypted credentials in the SCADA system. Exploitation of this issue could allow an attacker to substitute a password hash from one user to...

4.9CVSS7AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.5 views

PT-2023-7551 · Unknown · Trace Mode

Name of the Vulnerable Software and Affected Versions: TRACE MODE affected versions not specified Description: The issue is related to the unencrypted storage of credentials in the SCADA system. Exploitation of this issue could allow an attacker to modify user privileges, potentially granting...

4.9CVSS6.9AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2021/04/20 1:23 p.m.83 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.8AI score0.02079EPSS
Exploits4References5
OSV
OSV
added 2020/08/07 4:15 p.m.6 views

DEBIAN-CVE-2020-11993

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 above "info" will mitigate this...

7.5CVSS6.6AI score0.58716EPSS
Exploits2References1
OSV
OSV
added 2020/08/07 4:15 p.m.1 views

UBUNTU-CVE-2020-11993

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 above "info" will mitigate this...

7.5CVSS6.9AI score0.58716EPSS
Exploits2References5
NVD
NVD
added 2012/04/18 10:33 a.m.13 views

CVE-2011-5087

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

5CVSS6.7AI score0.01293EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2012/04/18 10:33 a.m.1 views

CVE-2011-5087

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

5CVSS5.8AI score0.01293EPSS
Exploits0References3
Prion
Prion
added 2012/04/18 10:33 a.m.15 views

Design/Logic Flaw

Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS...

5CVSS7.2AI score0.01293EPSS
Exploits0References2
Rows per page
Query Builder