Weak password vulnerability in TOTOLINK A3002MU

The A3002MU is a router. A weak password vulnerability exists in the TOTOLINK A3002MU, which can be exploited by attackers to obtain sensitive information...

IBM Robotic Process Automation has an unspecified vulnerability (CNVD-2022-56664)

IBM Robotic Process Automation is a robotic process automation product from IBM USA. IBM Robotic Process Automation versions 21.0.0, 21.0.1 and 21.0.2 have a security vulnerability that stems from the fact that users are not required to have strong passwords by default, which can be exploited by...

CVE-2022-2458

XML external entity injectionXXE is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser. The software processes an XML...

CVE-2022-35280

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 230634...

CVE-2022-35280

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 230634...

Malicious Package

Overview donuts.node-weak is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Intel Active Management Technology 安全漏洞

Intel Active Management Technology AMT is a suite of hardware-based remote active management technology software for computers from Intel Corporation. Intel Active Management Technology , Standard Manageability A security vulnerability exists in versions prior to August 9, 2022, which stems from...

The vulnerability of the Moodle virtual training environment, which arises due to the lack of measures taken to protect the structure of the web page, allows a hacker to execute arbitrary code and disclose the protected information.

The vulnerability in the Moodle virtual training environment exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose the protected information...

The vulnerability of the VMware Workspace One Access application management platform, the VMware Identity Manager administration console, and the VMware vRealize Automation virtual infrastructure management tools is a result of insufficient measures taken to protect the website structure. This vulnerability allows attackers to execute XSS attacks.

The vulnerability of the VMware Workspace One Access application management platform, as well as the VMware Identity Manager administration consoles and VMware vRealize Automation virtual infrastructure management tools, exists due to the lack of security measures taken to protect the website...

IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from IBM USA. IBM Robotic Process Automation versions 21.0.0, 21.0.1 and 21.0.2 have a security vulnerability that stems from the fact that users are not required to have strong passwords by default, which can be exploited by...

Emerson OpenBSI 加密问题漏洞

Emerson OpenBSI is a set of network communication services designed for technicians, engineers, and operators from Emerson Electric USA that provide access to ControlWave RTUs. A cryptographic issue vulnerability exists in Emerson OpenBSI version 5.9 SP3 and prior versions, which arises from the...

PT-2022-4561 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Print Spooler, which can be exploited to elevate privileges. This could allow an attacker to affect the...

PT-2022-16733 · Red Hat +1 · Kie-Server Apis +1

Name of the Vulnerable Software and Affected Versions: Business Central affected versions not specified Kie-Server APIs affected versions not specified Description: The issue allows an attacker to interfere with an application's processing of XML data through XML external entity injection XXE. Th...

Intel® IPP Cryptography Advisory

Summary: A potential security vulnerability in an Intel® Integrated Performance Primitives IPP Cryptography software library may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26083 Description:...

CVE-2021-41615

websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinparadise value, which does not follow the secret-data guideline for HTTP Digest Access Authentication in RFC 7616 section 3.3 or RFC 2617 section 3.2.1. NOTE:...

The vulnerability of the print spooler in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Print Spooler in operating systems related to the print queue is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

SSL/TLS Weak Key Exchange Supported

The remote host supports SSL/TLS key exchanges that are cryptographically weaker than recommended. Key exchanges must be recommended by IANA and should provide at least 224 bits of security, which translates to a minimum key size of 2048 bits for Diffie Hellman and RSA key exchanges. No source da...

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

PT-2022-11443 · Goahead · Goahead Web Server

Name of the Vulnerable Software and Affected Versions: GoAhead WebServer version 2.1.8 Description: The issue arises from insufficient nonce entropy in the websda.c file of GoAhead WebServer. This is due to the nonce calculation relying on a hardcoded value, onceuponatimeinparadise, which does no...

OESA-2022-1804 targetcli security update

Targetcli is an administration tool for managing storage targets using the kernel LIO core target and compatible target fabric modules. Security Fixes: Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files.CVE-2020-13867...