CVE-2023-38688: Missing Encryption of Sensitive Data

twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication. In the configuration of the irc connection, the software disables TLS, which makes all communication to Twitch IRC servers unencrypted. As a result, communication, including...

Canon PIXMA TR4550 1.020 / 1.080 Unencrypted Secret Storage

Advisory ID: SYSS-2023-011 Product: PIXMA TR4550 Manufacturer: Canon Affected Versions: 1.020 / 1.080 also affects many other Canon inkjet printer models4 Tested Versions: 1.020 / 1.080 Vulnerability Type: Insufficient or Incomplete Data Removal within Hardware Component CWE-1301 Insufficiently...

CVE-2023-21408

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems...

CVE-2023-21409

Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application...

CVE-2023-21409

Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application...

CVE-2023-21408

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems...

CVE-2023-21409

CVE-2023-21409: The issue is described as insufficient file permissions that allow unprivileged users to access unencrypted administrator credentials and configure the application. The Red Hat entry reiterates this description. No concrete remediation, affected product/version specifics, exploit ...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Ideal for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. AXIS License Plate Verifier 2.8.3 and prior versions contain a security vulnerability that ste...

Moxa AWK-3121 Cleartext Transmission of Sensitive Information (CVE-2018-10698)

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET...

GHSA-779W-XVPM-78JX twitch-tui's connection is not encrypted

Summary The connection is not using TLS for communication Details In the configuration of the irc connection, you are disabling tls which makes all communication to twitch irc servers unencrypted. PoC You can verify by using tcpdump/wireshark that traffic is unencrypted. Impact Communication can ...

PT-2023-26552 · Unknown · Twitch-Tui

Name of the Vulnerable Software and Affected Versions: twitch-tui versions prior to 2.4.1 Description: The issue arises from the software's configuration of the IRC connection, which disables TLS, resulting in unencrypted communication to Twitch IRC servers. This allows communication, including...

Authentication Bypass

github.com/envoyproxy/envoy is vulnerable to Authentication Bypass. The library supports mixed-case schemes for HTTP/2; however, internal checks that are case-sensitive may result in rejections or bypasses in unencrypted connections, possibly harming htTp and htTps requests...

Hitachi Device Manager Unauthorized Access

The vulnerabilities of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager system are related to the transmission of data in an unencrypted form. Exploiting these vulnerabilities can allow a malicious actor to gain unauthorized access ...

CVE-2023-31462

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...

CVE-2023-31462

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...

CVE-2023-31462

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...

Code injection

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...

SteelSeries GG 安全漏洞

SteelSeries GG is an all-in-one gaming platform from Danish company SteelSeries. It bundles powerful gaming applications into one easy-to-use interface. SteelSeries GG version 36.0.0 contains a security vulnerability that can be exploited by an attacker to change values in an unencrypted database...

CVE-2023-31462

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges...

CVE-2023-31462

CVE-2023-31462 affects SteelSeries GG 36.0.0. The issue arises from an unencrypted database that is writable by all users on the host, enabling an attacker to change values and trigger code execution with higher privileges. The available documents confirm the affected software/version and the und...