82 matches found
Clario VPN Data Transmission
The vulnerability of the Clario VPN client relates to the lack of protection for transmitted data. Exploiting this vulnerability allows a hacker to send arbitrary IP traffic as plain text beyond the VPN tunnel...
CVE-2023-1636
A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...
IBM Aspera Faspex Information Disclosure
The vulnerability of the IBM Aspera Faspex file-sharing application lies in the lack of protection for the transmitted data. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...
Valmet System 2019 Privilege Escalation
The vulnerability of the Valmet System 2019 software suite Metso DNA lies in the lack of protection for transmitted data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges within the system...
Western Digital My Cloud 安全漏洞
Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in the Western Digital My Cloud Web App. An attacker could exploit the vulnerability to compromise the integrity, confidentiality, and authenticity of transmitted information...
CVE-2022-1662
In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This could allow unauthorized local users to view the password via the process list while convert2rhel is running. However, this...
IBM Engineering Lifecycle Optimization 安全漏洞
IBM Engineering Lifecycle Optimization ELO is an extension of the Engineering Lifecycle Management ELM portfolio from IBM America. They make it easier to collect and analyze data across the development environment to make better decisions. Automate reporting to ensure that the entire organization...
GSD-2022-1000851 sc16is7xx: Fix for incorrect data being transmitted
sc16is7xx: Fix for incorrect data being transmitted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...
CVE-2022-21179
Cross-site request forgery CSRF vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 for EC-CUBE 4 series and ver1.0.0 to 1.0.4 for EC-CUBE 3 series allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted pag...
PowerLogic ION7400 ION7650 ION83xx ION84xx ION85xx ION
The vulnerability of the microprogrammed software for PowerLogic power meters and energy counters, such as ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000, and PM800, stems from the lack of protection for transmitted data. Exploiting this vulnerability can allow an unauthorize...
Logic Controllers Modicon M218 Data Transmission Unauthorized Access
The vulnerability of microprogrammed software in Logic Controllers Modicon M218, Modicon M251, Modicon M241, and Modicon M258 lies in the lack of protection for transmitted data. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected...
CVE-2019-18231
Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in clear text form, which may allow an attacker to intercept the request...
Performance API Component Google Chrome Unauthorized Access
The vulnerability of the Performance API component in the Google Chrome web browser is related to the lack of protection for the transmitted data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Geneve Protocol Unauthorized Access
The vulnerability of the GENEVE protocol’s implementation in Linux kernel systems is related to the lack of protection for transmitted data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
PT-2020-4461 · Cisco · Cisco Ftd +1
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance versions prior to the fixed release Cisco Firepower Threat Defense versions prior to the fixed release Description: The issue is related to a memory exhaustion condition in the TCP packet processing of the...
CVE-2020-10039
A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to...
Huawei Myna Information Disclosure Vulnerability
Huawei Myna is a smart speaker from Chinese company Huawei Huawei. An information disclosure vulnerability exists in Huawei Myna, which stems from the speaker's mishandling of transmitted data when the smart speaker and the cloud are paired over Wi-Fi. An attacker could use the vulnerability to...
Simatic Ident Encryption Bypass
The vulnerability of the microprogramming software in Simatic Ident system-based industrial identification and positioning systems is related to the lack of encryption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to data transmitted between the...
