Design/Logic Flaw

IBM MQ Advanced Cloud Pak IBM Cloud Private 1.0.0 through 3.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 159465...

CVE-2019-4239

IBM MQ Advanced Cloud Pak IBM Cloud Private 1.0.0 through 3.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 159465...

CVE-2019-4239

IBM MQ Advanced Cloud Pak IBM Cloud Private 1.0.0 through 3.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 159465...

Code injection

A vulnerability has been identified in SIMATIC MV400 family All Versions V7.0.6. An authenticated attacker could escalate privileges by sending specially crafted requests to the integrated webserver. The security vulnerability can be exploited by an attacker with network access to the device. Val...

CVE-2019-10981

In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials...

Design/Logic Flaw

In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials...

CVE-2019-10981

The CVE-2019-10981 vulnerability affects AVEVA Vijeo Citect 7.30/7.40 and CitectSCADA 7.30/7.40, where an authenticated local user may access Citect user credentials due to Insufficiently Protected Credentials (CWE-522). Reported in ICS context with a CVSS v3 base score of 6.5 (local, low skill t...

GHSA-78J5-GCMF-VQC8 Cross-Site Scripting (XSS) in Verdaccio

Impact What kind of vulnerability is it? Who is impacted? Cross-Site Scripting XSS, malicious packages with content Javascript that might be executed in the User Interface stealing user credentials. Patches Has the problem been patched? What versions should users upgrade to? Users that still usin...

Cybozu Garoon >= 4.2.4, <= 4.10.1 Multiple Vulnerabilities

Cybozu Garoon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon"; ifdescription...

WordPress Chrome-Extensions 1.0 Open Redirection

Exploit Title : WordPress Chrome-Extensions Themes 1.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 23/05/2019 Vendor Homepage : chrome-extensions.org - cssjockey.com Information Link : themesinfo.com/chrome-extensions-wordpress-theme-wwpx...

Sierra Wireless AirLink Information Disclosure (CVE-2018-4069)

An information disclosure vulnerability exists in Sierra Wireless AirLink. This vulnerability is due to lack of encryption of the user credentials. An attacker can listen to network traffic upstream from the device to capitalize on this vulnerability...

WordPress Dankov Planer 1.1.2 Open Redirection

Exploit Title : WordPress Dankov Planer Themes 1.1.2 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 23/05/2019 Vendor Homepage : wordpress.dankov-theme.com/planer/ - themeforest.net/user/dankovthemes Information Link :...

CVE-2019-8352

By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services. If an attacker were able to capture this network traffic, they could decrypt these credentials and use them to execute code ...

CVE-2019-5945

Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon...

CVE-2019-1860

CVE-2019-1860 concerns Cisco Unified Intelligence Center. Affects the dashboard gadget rendering where lack of gadget validation lets an unauthenticated, remote attacker coerce users to load a malicious gadget, enabling access to or manipulation of sensitive information between a user’s browser a...

Input validation

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI...

CVE-2019-11204

The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. The sensitive information that might be affected...

Design/Logic Flaw

The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. The sensitive information that might be affected...

CVE-2019-11204 TIBCO Spotfire Statistics Services Exposes Sensitive Files

The web interface component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that might theoretically allow an authenticated user to access sensitive information needed by the Spotfire Statistics Services server. The sensitive information that might be affected...

CVE-2019-11204

The CVE-2019-11204 entry concerns the web interface component of TIBCO Spotfire Statistics Services. Affected releases are Spotfire Statistics Services up to 7.11.1 and 10.0.0. The vulnerability could allow an authenticated user to access sensitive information (e.g., database, JMX, LDAP, Windows ...