5801 matches found
PT-2025-32979 · Zkteco · Zkteco Wl20
Name of the Vulnerable Software and Affected Versions: ZKTeco WL20 affected versions not specified Description: The vulnerability stems from the storage of administrator and user credentials without encryption within the device firmware. An attacker with physical access can exploit this by...
ZKTeco WL20 安全漏洞
ZKTeco WL20 is a smart fingerprint time and attendance machine from China Entropy Base Technology ZKTeco. A security vulnerability exists in the ZKTeco WL20 that stems from unencrypted administrator and user credentials stored in the device's firmware, which could allow a physical access attacker...
CVE-2024-41980
A vulnerability has been identified in SmartClient modules Opcenter QL Home SC All versions = V13.2 = V13.2 = V13.2 V2506. The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive...
CVE-2024-41980
A vulnerability has been identified in SmartClient modules Opcenter QL Home SC All versions = V13.2 = V13.2 = V13.2 V2506. The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive...
CVE-2024-41982
A vulnerability has been identified in SmartClient modules Opcenter QL Home SC All versions = V13.2 = V13.2 = V13.2 V2506. The affected application does not have adequate encryption of sensitive information. This could allow an authenticated attacker to gain access of sensitive information...
CVE-2024-41980
The CVE-2024-41980 issue affects SmartClient Opcenter QL Home, SOA Audit, and SOA Cockpit. Affected SmartClient components do not encrypt LDAP interface communications by default, enabling an authenticated attacker to access sensitive information. Affected versions are 13.2 through 2505 (inclusiv...
CVE-2024-41980
A vulnerability has been identified in SmartClient modules Opcenter QL Home SC All versions = V13.2 = V13.2 = V13.2 V2506. The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive...
CVE-2024-41980
A vulnerability has been identified in SmartClient modules Opcenter QL Home SC All versions = V13.2 = V13.2 = V13.2 V2506. The affected application do not encrypt the communication in LDAP interface by default. This could allow an authenticated attacker to gain unauthorized access to sensitive...
PT-2025-32639 · Smartclient · Smartclient Opcenter Ql Home +2
Name of the Vulnerable Software and Affected Versions: SmartClient Opcenter QL Home SC versions 13.2 through 2505 SmartClient SOA Audit versions 13.2 through 2505 SmartClient SOA Cockpit versions 13.2 through 2505 Description: The affected application does not encrypt communication in the LDAP...
Siemens SmartClient modules Opcenter QL Home 安全漏洞
Siemens SmartClient modules Opcenter QL Home is a client module from Siemens, Germany. A security vulnerability exists in Siemens SmartClient modules Opcenter QL Home, which stems from unencrypted LDAP communication and could lead to the disclosure of sensitive information...
The vulnerability of the strongSwan microprogramming software firewall solution developed by Ruijie RG-EG306MG-P allows a intruder to disclose protected information.
The vulnerability of the strongSwan microprogramming software firewall solution from Ruijie RG-EG306MG-P lies in the lack of encryption for confidential data during the processing of the parameter “idontcareaboutsecurityanduseaggressivemodepsk”. Exploiting this vulnerability can allow a remote...
PT-2025-32544 · Yugabyte · Yugabytedb
Name of the Vulnerable Software and Affected Versions: YugabyteDB affected versions not specified Description: YugabyteDB diagnostic information was transmitted over HTTP, potentially exposing sensitive data during transmission. Recommendations: At the moment, there is no information about a newe...
The vulnerability of the application software of the Central Medical Information System of the State Health Information System (GIS SZ), related to the unencrypted storage of critical information, allows a perpetrator to disclose identification data.
The vulnerability of the application software of the Central Medical Information System of the State Health Information System GIS SZ is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose identification data...
Linux Distros Unpatched Vulnerability : CVE-2023-32762
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-securit...
CVE-2025-53520
The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center remote, cloud-connected interface or via a serial connection, and can install these files without integrity checks. The TTComp archive format...
Ruijie EG306MG 安全漏洞
Ruijie EG306MG is a router from China Ruijie Ruijie. A security vulnerability exists in Ruijie EG306MG version 3.01B11P309, which originates from improper handling of the parameter idontcareaboutsecurityanduseaggressivemodepsk in the file /etc/strongswan.conf, which may cause sensitive data to be...
CVE-2025-53520
The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center remote, cloud-connected interface or via a serial connection, and can install these files without integrity checks. The TTComp archive format...
CVE-2025-53520 EG4 Electronics EG4 Inverters Download of Code Without Integrity Check
The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center remote, cloud-connected interface or via a serial connection, and can install these files without integrity checks. The TTComp archive format...
CVE-2025-53520
CVE-2025-53520 affects EG4 Electronics EG4 Inverters. Firmware updates can be downloaded from EG4’s site, transferred via USB dongles, or installed through the Monitoring Center or via a serial connection, and are installed without integrity checks. TTComp firmware archives are unencrypted and ca...
CVE-2025-53520 EG4 Electronics EG4 Inverters Download of Code Without Integrity Check
The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center remote, cloud-connected interface or via a serial connection, and can install these files without integrity checks. The TTComp archive format...