GLSA-202107-14 : rclone: Weak random number generation

The remote host is affected by the vulnerability described in GLSA-202107-14 rclone: Weak random number generation Passwords generated with rclone were insecurely generated and are vulnerable to brute-force attacks. Impact : Data kept secret with a password generated by rclone may be disclosed to...

Unisys Messaging Integration Services 授权问题漏洞

Unisys Messaging Integration Services Ntsi is a messaging-based interface between two programs from Unisys, Inc. A security vulnerability exists in Unisys Messaging Integration Services Ntsi, which stems from a network system or product that does not The vulnerability is caused by a network syste...

CVE-2022-22553

Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is...

CVE-2022-22553

Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is...

CVE-2022-22553

Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is...

Backdoor.Win32.Wollf.16 Hardcoded Credential

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/204613443e555f73237ea43a2faecaa5B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wollf.16 Vulnerability: Weak Hardcoded Credentials Description: The malware runs wit...

min-dash 安全漏洞

min-dash is a minimal utility belt for use with bpmn.io related libraries. A security vulnerability exists in versions prior to min-dash 3.8.1, which stems from the lack of critical type enforcement and makes the software susceptible to prototype contamination via the set method...

Rapid7 Insight Agent 安全漏洞

Rapid7 Insight Agent is a lightweight software from Rapid7, Inc. that collects data from IT assets. The software is capable of collecting data from IT assets.An arbitrary file reading vulnerability exists in Rapid7 Insight Agent versions prior to 3.1.3, which stems from the software's lack of...

CVE-2021-34600

Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation...

CVE-2021-34600 Telenot complex: Insecure AES Key Generation

Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation...

PT-2022-10364 · Telenot · Telenot Compasx

Name of the Vulnerable Software and Affected Versions: Telenot CompasX versions prior to 32.0 Description: The issue is related to the use of a weak seed for random number generation, which leads to predictable AES keys used in NFC tags for local authorization of users. This may result in the tot...

Telenot CompasX 安全特征问题特征问题漏洞

Telenot CompasX is a parameter setting software from Telenot. Telenot CompasX suffers from a security signature issue vulnerability that arises from the use of weak seeding to generate random numbers, which results in a risk of decryption...

Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®

Summary IBM has released the following fix for IBM Db2® Warehouse in response to multiple vulnerabilities found in IBM Db2®. Vulnerability Details CVEID: CVE-2021-38931 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.1, and 11.5 is vulnerable to an information...

CVE-2021-34600

Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation...

Weak password vulnerability in Kingdee Cloudstar

Kingdee Cloudstar is a new generation of strategic enterprise management software developed based on cutting-edge technologies such as cloud computing, big data, socialization, artificial intelligence and Internet of Things. There is a weak password vulnerability in Kingdee Cloudstar, which can b...

Weak Password Vulnerability in CCTC Application Server Software of Shandong CCTC Software Commercial Middleware Co.

Ltd. is a national basic software middleware backbone enterprise. Ltd. is a national basic software middleware enterprise. There is a weak password vulnerability in CCTC application server software, which can be exploited by attackers to obtain sensitive information...

livehelperchat 跨站请求伪造漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, which stems from a WEB application that does not adequately validate that a request is coming from a trusted...

CVE-2021-34997

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

The vulnerability of the IBM Spectrum Protect Plus data protection software lies in its insufficient protection for registration data, allowing attackers to disclose the protected information.

The vulnerability of the IBM Spectrum Protect Plus data protection software platform lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose the protected information...

Red Hat Ceph Storage 授权问题漏洞

Red Hat Ceph Storage is a suite of scalable, open software-defined storage platforms from Red Hat USA. An authorization issue vulnerability exists in Red Hat Ceph Storage, where an attacker can exploit the fact that the key length is incorrectly passed in the encryption algorithm to create a...