CVE-2015-8946

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2016-6224

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a 1 NVMe or 2 MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an...

Information disclosure

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

DEBIAN-CVE-2015-8946

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2016-6224

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a 1 NVMe or 2 MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an...

CVE-2015-8946

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

The vulnerability of the ABB PCM600 control and configuration device allows a intruder to gain access to user passwords.

The vulnerability of the ABB PCM600 control and configuration device lies in the fact that the password for the main application is stored in an unencrypted form after being changed by the user. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to user...

The vulnerability of the ABB PCM600 control and configuration device allows a intruder to gain access to user passwords.

The vulnerability of the ABB PCM600 control and configuration device lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to the passwords of the IEC61850 OPC server by analyzing the System.xml...

CVE-2016-6224

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a 1 NVMe or 2 MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an...

[SECURITY] Fedora 23 Update: krb5-1.14.1-7.fc23

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

cmxcisco.helprace.com XSS vulnerability

Vulnerable URL: https://cmxcisco.helprace.com/auth/forgot-password?lang=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

Vulnerability of Cisco ASA software, allowing attackers to increase their privileges

A vulnerability exists in the loaded list function of RADIUS in Cisco PIX and VPN 3000 concentrators. This vulnerability arises when a random internal name is generated for the RADIUS ACL list, which is also used as a hidden user name and password. Exploiting this vulnerability allows malicious...

The vulnerability of Cisco PIX software allows a malicious individual to increase their privileges.

A vulnerability exists in the loaded list function of RADIUS in Cisco PIX and VPN 3000 concentrators. This vulnerability arises when a random internal name is generated for the RADIUS ACL list, which is also used as a hidden user name and password. Exploiting this vulnerability allows malicious...

The vulnerability of the Windows operating system, which allows a malicious individual to intercept confidential information

Data related to Telnet protocol in the Windows operating system is transmitted in an unencrypted form. This allows a remote malicious individual to intercept confidential information, including user names and passwords, by analyzing network traffic...

The vulnerability of the Dr.Web Enterprise Security Suite, a antivirus protection tool, allows a hacker to execute arbitrary code.

The vulnerability in the update mechanism of the Dr.Web Enterprise Security Suite lies in the lack of encryption for network traffic between the update server and the software being updated. The HTTP network connection is established without using TSL or SSH. This allows a malicious actor to carr...

[SECURITY] Fedora 24 Update: krb5-1.14.1-7.fc24

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

Apple iOS Beta Kernel Unencrypted: Pros and Cons

Last week Apple cleared the air as to whether or not it intentionally released an unencrypted version of its iOS 10 beta kernel to the developer community, stating the move was intentional. “The kernel cache doesn’t contain any user info, and by unencrypting it we’re able to optimize the operatin...

Apple left iOS 10 Kernel Code Unencrypted, Intentionally!

Apple’s new iOS 10 recently made headlines after MIT Technology Review revealed that the company had left the kernel of the mobile operating system unencrypted. Yes, the first developer preview of iOS 10 released at WWDC has an unencrypted kernel. When the headline broke, some of the users were...

Vulnerability of the Mac OS X operating system and the iOS operating system, allowing attackers to obtain confidential information

The vulnerability of the MapKit component in the Mac OS X and iOS operating systems is related to the lack of use of the HTTPS protocol for links. Exploiting this vulnerability can allow a malicious actor to obtain confidential information by monitoring network traffic remotely...

CVE-2016-1842

MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...