Lucene search
+L

5802 matches found

BDU FSTEC
BDU FSTEC
added 2025/01/16 12:00 a.m.19 views

The vulnerability of the Dell VxRail hyper-converged infrastructure, related to the unencrypted storage of critical information, allows a intruder to disclose protected data.

The vulnerability of the Dell VxRail hyper-converged infrastructure is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected data...

7.5CVSS5.5AI score0.00128EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2025/01/07 2:53 a.m.12 views

Incorrect Implementation Of The Authentication Algorithm

org.apache.kafka, kafka-clients is vulnerable to an incorrect implementation of the authentication algorithm. The vulnerability is due to the lack of nonce verification in Apache Kafka's SCRAM implementation, where the server does not verify that the nonce sent by the client in the second message...

5.3CVSS6.8AI score0.00795EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/26 12:00 a.m.18 views

The vulnerability of the VPN protection component of Fortinet’s FortiClient devices, which allows unauthorized access to protected information

The vulnerability of the Fortinet FortiClient security device’s VPN component lies in the fact that confidential information is stored in unencrypted form in its memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the protected information...

4.9CVSS5.5AI score0.00164EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2024/12/18 12:15 p.m.16 views

CVE-2024-4995

Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects Wapro ERP Desktop versions before 9.00.0...

9.8CVSS0.0093EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/18 11:36 a.m.29 views

CVE-2024-4995 Protocol Downgrade in Wapro ERP Desktop

Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects Wapro ERP Desktop versions before 9.00.0...

9.1CVSS0.0093EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/18 11:36 a.m.49 views

CVE-2024-4995

CVE-2024-4995 (Wapro ERP Desktop) is publicly described as a server-side MS SQL protocol downgrade vulnerability affecting Wapro ERP Desktop before 9.00.0. The issue enables unencrypted communication between components, which may allow data interception and modification. Public records do not spe...

9.8CVSS7AI score0.0093EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/18 11:36 a.m.7 views

CVE-2024-4995 Protocol Downgrade in Wapro ERP Desktop

Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects Wapro ERP Desktop versions before 9.00.0...

9.1CVSS7.7AI score0.0093EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/18 12:00 a.m.14 views

PT-2024-33792

Name of the Vulnerable Software and Affected Versions: Wapro ERP Desktop versions prior to 9.00.0 Description: The issue affects Wapro ERP Desktop, where it is vulnerable to MS SQL protocol downgrade requests from the server side. This could lead to unencrypted communication, making it vulnerable...

9.8CVSS9.2AI score0.0093EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2024/12/18 12:00 a.m.12 views

The vulnerability of the IBM Tivoli Workload Scheduler software lies in the fact that it stores passwords in an unencrypted form, allowing a malicious individual to exploit this to disclose protected information.

The vulnerability of the IBM Tivoli Workload Scheduler software lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow a hacker to disclose the protected information...

5.5CVSS5.4AI score0.00146EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/12/18 12:00 a.m.8 views

Asseco Business Solutions Wapro ERP 安全漏洞

Asseco Business Solutions Wapro ERP is an enterprise-oriented ERP software from Asseco Business Solutions, Poland. A security vulnerability exists in Asseco Business Solutions Wapro ERP versions prior to 9.00.0, which stems from vulnerability to server-side MS SQL protocol downgrade requests, whi...

9.8CVSS9.2AI score0.0093EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:00 a.m.16 views

The vulnerability in the web interface of the microprogramming software for TP-Link Archer C50 allows a intruder to gain unauthorized access to the credentials of the target Wi-Fi system.

The vulnerability of the web-based management interface for TP-Link Archer C50 wireless routers involves the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the credentials of the target Wi-Fi system...

4.8CVSS5.5AI score0.00153EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2024/12/11 12:00 a.m.16 views

Siemens SICAM A8000 CP-8031 and CP-8050 Firmware Decryption Vulnerability

The SICAM A8000 RTU Remote Terminal Unit is a modular device for remote control and automation applications in all areas of energy supply. A firmware decryption vulnerability exists in the Siemens SICAM A8000 CP-8031 and CP-8050 due to the fact that the affected devices contain a secure element...

5.1CVSS7.4AI score0.00292EPSS
SaveExploits1References1
NVD
NVD
added 2024/12/10 2:30 p.m.22 views

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

5.1CVSS0.00292EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/12/10 1:54 p.m.9 views

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

5.1CVSS6.8AI score0.00292EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/12/10 1:54 p.m.22 views

CVE-2024-53832

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V05.30. The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the...

5.1CVSS0.00292EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/12/10 12:00 a.m.15 views

PT-2024-35944 · Unknown · Cpci85 Central Processing/Communication

Name of the Vulnerable Software and Affected Versions: CPCI85 Central Processing/Communication versions prior to V05.30 Description: A vulnerability has been identified in the CPCI85 Central Processing/Communication devices. The affected devices contain a secure element connected via an unencrypt...

5.1CVSS6.7AI score0.00292EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/12/10 12:00 a.m.13 views

Siemens CPCI85 Central Processing 安全漏洞

The SICAM A8000 RTU Remote Terminal Unit is a modular device for remote control and automation applications in all areas of energy supply. A firmware decryption vulnerability exists in the Siemens SICAM A8000 CP-8031 and CP-8050 due to the fact that the affected devices contain a secure element...

5.1CVSS7.2AI score0.00292EPSS
SaveExploits1References1
NVD
NVD
added 2024/12/09 3:15 a.m.23 views

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

5.7CVSS0.00126EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 12:00 a.m.17 views

CVE-2024-55582

Oxide before 6 has unencrypted Control Plane datastores...

5.7CVSS0.00126EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.9 views

Oxide 安全漏洞

Oxide is a cloud platform from Oxide, Inc. A security vulnerability exists in versions prior to Oxide 6 that stems from having unencrypted control plane data storage...

5.7CVSS6.7AI score0.00126EPSS
SaveExploits0References1
Rows per page
Query Builder