15792 matches found
CISA Warns of Hackers Exploiting Legacy Cisco Smart Install Feature
The U.S. Cybersecurity and Infrastructure Security Agency CISA has disclosed that threat actors are abusing the legacy Cisco Smart Install SMI feature with the aim of accessing sensitive data. The agency said it has seen adversaries "acquire system configuration files by leveraging available...
USN-6948-1: Salt vulnerabilities
It was discovered that Salt incorrectly handled crafted web requests. A remote attacker could possibly use this issue to run arbitrary commands. CVE-2020-16846 It was discovered that Salt incorrectly created certificates with weak file permissions. CVE-2020-17490 It was discovered that Salt...
Ubuntu 16.04 LTS / 18.04 LTS : Salt vulnerabilities (USN-6948-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6948-1 advisory. It was discovered that Salt incorrectly handled crafted web requests. A remote attacker could possibly use this issue to run arbitrary...
Horizon Business Services Caterease 安全漏洞
Horizon Business Services Caterease is an event planning and catering software from Horizon Business Services, USA. A security vulnerability exists in Horizon Business Services Caterease versions 16.0.1.1663 through 24.0.1.2405 and later versions, which stems from the selection of less secure...
PT-2024-28254 · Horizon Business Services Inc. · Caterease
Name of the Vulnerable Software and Affected Versions: Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405 Description: The issue allows a remote attacker to perform a Drop Encryption Level attack due to the selection of a less-secure algorithm during negotiation...
PT-2024-28997 · Changing Information Technology · Tcbservisign
Name of the Vulnerable Software and Affected Versions: CHANGING Information Technology TCBServiSign Windows Version affected versions not specified Description: The issue is related to the insufficient encryption strength of authorization keys. A remote attacker can exploit this by tricking a...
CVE-2024-32758
Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange...
PT-2024-5766 · Unknown · Exacqvision Server +1
Name of the Vulnerable Software and Affected Versions: exacqVision Client and exacqVision Server affected versions not specified Description: The issue is related to insufficient key length and exchange in the communication between exacqVision Client and exacqVision Server, which may allow a remo...
CVE-2024-38182
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...
CVE-2024-38182
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...
CVE-2024-38182
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...
CVE-2024-38182
CVE-2024-38182 is a Microsoft Dynamics 365 elevation-of-privilege vulnerability described as weak authentication that allows an unauthenticated, network-based attacker to escalate privileges. Connected sources confirm the issue affects Microsoft Dynamics 365 Field Service On-Premises version 7 (o...
Microsoft Dynamics 365 Elevation of Privilege Vulnerability
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...
The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips allows attackers to disclose protected information.
The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips is related to the use of insufficiently random values. Exploiting this vulnerability can allow attackers to disclose protected information...
The vulnerability of SIPROTEC relay protection devices, related to insufficiently secure data encryption, allows attackers to carry out “man-in-the-middle” attacks.
The vulnerability of SIPROTEC relay protection devices is related to insufficiently secure data encryption. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out “man-in-the-middle” attacks using specially crafted packets sent to port 4443/tcp...
The vulnerability in the web interface of the IBM Security Directory Integrator and IBM Security Verify Directory Integrator software allows a perpetrator to execute arbitrary code and expose sensitive information.
The vulnerability of the web interface of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tool is related to the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious acto...
Microsoft Dynamics 365 安全漏洞
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics 365 that stems from the presence o...
UBUNTU-CVE-2024-23091
Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values...
Weak Password Vulnerability in Data Decision System of Fansoft Software Co.
SailSoft Software Ltd. is a company dedicated to providing one-stop business intelligence solutions. A weak password vulnerability exists in the Data Decision System of SailSoft Software Limited, which can be exploited by attackers to obtain sensitive information...
