15832 matches found
PT-2023-14549 · Ibm · Insights For Vulnerability Remediation
Name of the Vulnerable Software and Affected Versions: BigFix Insights for Vulnerability Remediation IVR affected versions not specified Description: The issue concerns the use of weak cryptography, which can lead to credential exposure. An attacker could potentially gain access to sensitive...
CVE-2020-27213
An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers ISNs for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existin...
The vulnerability of microprogramming software in routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 arises from the use of weak encryption algorithms. This allows attackers to carry out “man-in-the-middle” attacks.
The vulnerability of microprogramming software in routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 is related to the use of weak encryption algorithms. Exploiting this vulnerability can allow a remote attacker to carry out a...
The vulnerability of the Apache InLong data integration platform, related to weak password requirements, allows attackers to gain access to user accounts.
The vulnerability of the Apache InLong data integration platform is related to weak password requirements. Exploiting this vulnerability could allow a malicious actor to gain access to a user account remotely...
CVE-2022-33160
IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228568...
The vulnerability of the IoT Cassia Access Controller’s access control software allows a hacker to perform a CSRF attack.
The vulnerability of the IoT Cassia Access Controller software for managing access to wireless networks is related to insufficient verification of the authenticity of the requests being made. Exploiting this vulnerability could allow a malicious actor to execute a CSRF attack from a remote locati...
PortlandLabs Concrete CMS 跨站脚本漏洞
PortlandLabs Concrete CMS is a team-oriented open source content management system of the United States PortlandLabs company . A cross-site scripting vulnerability exists in the PortlandLabs Concrete CMS Custom Label field. The vulnerability stems from the lack of effective filtering and escaping...
The vulnerability of the EMUI messaging module of the HarmonyOS operating system allows a hacker to compromise the confidentiality of the protected information.
The vulnerability of the EMUI messaging module of the HarmonyOS operating system is related to the use of a weak encryption mechanism when sending 5G messages. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the information being protected...
CVE-2023-26239
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user...
CVE-2023-26239
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user...
Privilege escalation
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on Windows by sending a crafted message to a named pipe...
Default credentials
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user...
PT-2023-20556 · Watchguard · Watchguard Epdr
Name of the Vulnerable Software and Affected Versions: WatchGuard EPDR version 8.0.21.0002 Description: An issue was discovered due to a weak implementation of a password check, making it possible to obtain credentials to access the management console as a non-privileged user. Recommendations: Fo...
CVE-2023-26239
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user...
WatchGuard EPDR Security Vulnerability
WatchGuard EPDR is an application from WatchGuard USA, Inc. prevents, detects and responds to any type of known and unknown malware as well as fileless and malware-free attacks. A security vulnerability exists in WatchGuard EPDR version 8.0.21.0002, which stems from a weak implementation of...
CVE-2023-26239
An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user...
The vulnerability of Acronis Cyber Protect 15’s data protection software lies in its insufficient protection of registration data, allowing attackers to gain unauthorized access to the protected information.
The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
PT-2023-6113 · Ansys · Ansys Spaceclaim
Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. It requires user interaction, where the target must visit a malicious pa...
