CVE-2022-37400

Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice existed where the required initialization vector for encryption was always the same...

CVE-2022-37400 Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password

Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice existed where the required initialization vector for encryption was always the same...

PT-2022-23973 · Apache · Apache Openoffice +1

Name of the Vulnerable Software and Affected Versions: Apache OpenOffice versions prior to 4.1.13 Description: A flaw in Apache OpenOffice exists where the required initialization vector for encryption is always the same, weakening the security of the encryption. This makes stored passwords...

Microsoft Windows Defender Privilege Escalation

The vulnerability of Microsoft Windows Defender operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-20381: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A...

CVE-2022-20380: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A...

CVE-2022-20378: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A...

CVE-2022-20365: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A...

CVE-2022-20402: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A...

CVE-2022-20407: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A...

CVE-2022-20405: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A...

CVE-2022-20404: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A...

CVE-2022-20384: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A...

CVE-2022-20370: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A...

CVE-2022-20406: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A...

CVE-2022-20408: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A...

Intel PROSet/Wireless WiFi Software encryption vulnerabilities

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi Software, which stems from insufficient encryption strength. The vulnerability can be exploited by an attacker to elevate privileges...

Jenkins Repository Connector Plugin Auth Bypass Information Disclosure

The vulnerability of the Jenkins Repository Connector Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to obtain information about user identities remotely...

Jenkins Openstack Heat Plugin Auth Bypass

The vulnerability of the Jenkins Openstack Heat Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

E1 Component Read Information Disclosure

The vulnerability of component E1 in the JD Edwards EnterpriseOne Orchestrator application exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain read access to data through HTTP requests...