CWE-311 Archives - CVE Vulnerability

CVE-2018-8864

Sun, 26 Feb 2023 06:51:38 +0000

In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.

The post CVE-2018-8864 appeared first on CVE Vulnerability.

CVE-2018-8849

Sun, 26 Feb 2023 06:51:37 +0000

Medtronic N’Vision Clinician Programmer 8840 N’Vision Clinician Programmer, all versions, and 8870 N’Vision removable Application Card, all versions does not encrypt PII and PHI while at rest.

The post CVE-2018-8849 appeared first on CVE Vulnerability.

CVE-2018-7781

Sun, 26 Feb 2023 06:51:10 +0000

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.

The post CVE-2018-7781 appeared first on CVE Vulnerability.

CVE-2018-7498

Sun, 26 Feb 2023 06:51:04 +0000

In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.

The post CVE-2018-7498 appeared first on CVE Vulnerability.

CVE-2018-6975

Sun, 26 Feb 2023 06:50:54 +0000

The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entries in the Agent are not encrypted.

The post CVE-2018-6975 appeared first on CVE Vulnerability.

CVE-2018-6976

Sun, 26 Feb 2023 06:50:54 +0000

The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted filenames and associated metadata in SQLite database for the Content Locker.

The post CVE-2018-6976 appeared first on CVE Vulnerability.

CVE-2018-6674

Sun, 26 Feb 2023 06:50:48 +0000

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 13 allows local users to spawn unrelated processes with elevated privileges via the system administrator granting McTray.exe elevated privileges (by default it runs with the current user’s privileges).

The post CVE-2018-6674 appeared first on CVE Vulnerability.

CVE-2018-5481

Sun, 26 Feb 2023 06:50:21 +0000

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.

The post CVE-2018-5481 appeared first on CVE Vulnerability.

CVE-2018-5482

Sun, 26 Feb 2023 06:50:21 +0000

NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.

The post CVE-2018-5482 appeared first on CVE Vulnerability.

CVE-2018-5261

Sun, 26 Feb 2023 06:50:16 +0000

An issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext information from the handshake as input for the encryption key used for the encryption of the rest of the session, the server and client disclose sensitive information, such as the authentication credentials, to any man-in-the-middle (MiTM) listener.

The post CVE-2018-5261 appeared first on CVE Vulnerability.