Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-15753 State: PUBLISHED Published: 2018-10-02T18:00:00 Last Updated: 2024-08-05T10:01:54.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. The use of a Hard-coded DES Cryptographic Key allows an attacker who decodes the application to decrypt transmitted data such as the login username and password. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.e2security.de/2018/E2SA-2018-01.txt - https://seclists.org/bugtraq/2018/Oct/3
CVE ID: CVE-2018-15754 State: PUBLISHED Published: 2018-12-13T22:00:00Z Last Updated: 2024-09-16T17:24:01.117Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Cloud Foundry Products: UAA Release Problem Types: Improper Authentication Description: Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error. In environments with multiple identity providers that contain accounts across identity providers with the same username, a remote authenticated user with access to one of these accounts may be able to obtain a token for an account of the same username in the other identity provider. Additional Analyst Notes: - CVE Program Container:
for an account of the same username in the other identity provider. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106240 - https://www.cloudfoundry.org/blog/cve-2018-15754/ - https://www.cloudfoundry.org/blog/cve-2018-15754
CVE ID: CVE-2018-15755 State: PUBLISHED Published: 2018-10-12T21:00:00Z Last Updated: 2024-09-17T00:31:36.023Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Cloud Foundry Products: CF Networking Release Problem Types: SQL Injection Description: Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-15755/
CVE ID: CVE-2018-15756 State: PUBLISHED Published: 2018-10-18T22:00:00Z Last Updated: 2024-09-16T16:59:11.041Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Pivotal Products: Spring framework Problem Types: Numeric Range Comparison Without Minimum Check Description: Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controller returns an org.springframework.core.io.Resource. A malicious user (or attacker) can add a range head
nnotated controller returns an org.springframework.core.io.Resource. A malicious user (or attacker) can add a range header with a high number of ranges, or with wide ranges that overlap, or both, for a denial of service attack. This vulnerability affects applications that depend on either spring-webmvc or spring-webflux. Such applications must also have a registration for serving static resources (e.g. JS, CSS, images, and others), or have an annotated controller that returns an org.springframework.core.io.Resource. Spring Boot applications that depend on spring-boot-starter-web or spring-boot-starter-webflux are ready to serve static resources out of the box and are therefore vulnerable. Ad
r-web or spring-boot-starter-webflux are ready to serve static resources out of the box and are therefore vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105703 - https://lists.apache.org/thread.html/a3071e11c6fbd593022074ec1b4693f6d948c2b02cfa4a5d854aed68%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/339fd112517e4873695b5115b96acdddbfc8f83b10598528d37c7d12%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/d6a84f52db89804b0ad965f3ea2b24bb880edee29107a1c5069cc3dd%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/bb354962cb51fff65740d5fb1bc2aac56af577c06244b
%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/bb354962cb51fff65740d5fb1bc2aac56af577c06244b57c36f98e4d%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/7b156ee50ba3ecce87b33c06bf7a749d84ffee55e69bfb5eca88fcc3%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/77886fec378ee6064debb1efb6b464a4a0173b2ff0d151ed86d3a228%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/8a1fe70534fc52ff5c9db5ac29c55657f802cbefd7e9d9850c7052bd%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/efaa52b0aa67aae7cbd9e6ef96945387e422d7ce0e65434570a37b1d%40%3Cissues.activemq.apache.org%3E - https:/
he.org/thread.html/efaa52b0aa67aae7cbd9e6ef96945387e422d7ce0e65434570a37b1d%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/f8905507a2c94af6b08b72d7be0c4b8c6660e585f00abfafeccc86bc%40%3Cissues.activemq.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://pivotal.io/security/cve-2018-15756 - htt
5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://pivotal.io/security/cve-2018-15756 - https://www.oracle.com/security-alerts/cpujan2021.html - https://lists.debian.org/debian-lts-announce/2021/04/msg00022.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2018-15757 State: REJECTED Published: 2018-12-10T22:00:00 Last Updated: 2018-12-10T21:57:01 Description: No description available.
CVE ID: CVE-2018-15758 State: PUBLISHED Published: 2018-10-18T22:00:00Z Last Updated: 2024-09-17T01:16:40.202Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Pivotal Products: Spring Security OAuth Problem Types: Improper Privilege Management Description: Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0.16, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can craft a request to the approval endpoint that can modify the previously saved authorization request and lead to a privilege escalation on the sub
proval endpoint that can modify the previously saved authorization request and lead to a privilege escalation on the subsequent approval. This scenario can happen if the application is configured to use a custom approval endpoint that declares AuthorizationRequest as a controller method argument. This vulnerability exposes applications that meet all of the following requirements: Act in the role of an Authorization Server (e.g. @EnableAuthorizationServer) and use a custom Approval Endpoint that declares AuthorizationRequest as a controller method argument. This vulnerability does not expose applications that: Act in the role of an Authorization Server and use the default Approval Endpoint, a
y does not expose applications that: Act in the role of an Authorization Server and use the default Approval Endpoint, act in the role of a Resource Server only (e.g. @EnableResourceServer), act in the role of a Client only (e.g. @EnableOAuthClient). Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-15758 - http://www.securityfocus.com/bid/105687 - https://access.redhat.com/errata/RHSA-2019:2413
CVE ID: CVE-2018-15759 State: PUBLISHED Published: 2018-11-19T14:00:00Z Last Updated: 2024-09-17T01:50:35.021Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Pivotal Products: On Demand Services SDK Problem Types: Information Exposure Through Timing Discrepancy Description: Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many requests to the service broker with different credentials, allowing them to infer valid credentials and gain access to perform broker operations. Additional Analyst Notes: - CVE Program Container: References: - h
entials and gain access to perform broker operations. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-15759 - http://www.securityfocus.com/bid/106019
CVE ID: CVE-2018-15760 State: REJECTED Published: 2019-01-02T14:00:00 Last Updated: 2019-01-02T13:57:01 Description: No description available.
CVE ID: CVE-2018-15761 State: PUBLISHED Published: 2018-11-19T14:00:00Z Last Updated: 2024-09-17T00:46:20.654Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Cloud Foundry Products: UAA, UAA Release Problem Types: Improper Access Control Description: Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-15
ivileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-15761/
CVE ID: CVE-2018-15762 State: PUBLISHED Published: 2018-11-02T22:00:00Z Last Updated: 2024-09-16T18:54:15.856Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Pivotal Cloud Foundry Products: Pivotal Operations Manager Problem Types: Improper Authorization Description: Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman. Additional Analyst Notes: - CVE Program Container: Referen
create a new client with administrator privileges for Opsman. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-15762
CVE ID: CVE-2018-15763 State: PUBLISHED Published: 2018-10-05T21:00:00Z Last Updated: 2024-09-16T18:48:32.330Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Pivotal Products: Pivotal Container Service Problem Types: Information Exposure Through Application Logs Description: Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-1
ese credentials. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-15763
CVE ID: CVE-2018-15764 State: PUBLISHED Published: 2018-09-28T18:00:00Z Last Updated: 2024-09-16T23:26:42.377Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: DELL EMC Products: ESRS Policy Manager Problem Types: Remote code execution vulnerability Description: Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code in the server's JVM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041714 - https://secli
ditional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041714 - https://seclists.org/fulldisclosure/2018/Sep/47 - http://www.securityfocus.com/bid/105405
CVE ID: CVE-2018-15765 State: PUBLISHED Published: 2018-10-18T22:00:00Z Last Updated: 2024-09-16T19:36:30.744Z Severity: LOW (CVSS 3.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: DELL EMC Products: ESRS Virtual Edition Problem Types: Information Exposure Vulnerability Description: Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains an Information Exposure vulnerability. The log file contents store sensitive data including executed commands to generate authentication tokens which may prove useful to an attacker for crafting malicious authentication tokens for querying the application and subsequent attacks. Additional Analyst Notes: - CVE Program Container: Refe
tion tokens for querying the application and subsequent attacks. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2018/Oct/35 - http://www.securityfocus.com/bid/105694 - http://www.securitytracker.com/id/1041877
CVE ID: CVE-2018-15766 State: PUBLISHED Published: 2018-10-11T19:00:00Z Last Updated: 2024-09-16T23:30:30.573Z Vendors: Dell Products: Encryption, Endpoint Security Suite Enterprise Problem Types: Password Policy Vulnerability Description: On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manually set the "Minimum Password Length" group policy object to a value of 1 on that device. This allows for users to bypass any existing policy for password length and potentially create insecure password on their device. This value is defined during the installation of the "Encryption Management Agent" or "EMAgent" appli
d on their device. This value is defined during the installation of the "Encryption Management Agent" or "EMAgent" application. There are no other known values modified. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/us/en/04/sln313561/dell-encryption-and-dell-endpoint-security-suite-enterprise-security-policy-overwrite-vulnerability?lang=en
CVE ID: CVE-2018-15767 State: PUBLISHED Published: 2018-11-30T17:00:00Z Last Updated: 2024-09-17T03:53:45.259Z Vendors: Dell Products: OpenManage Network Manager Problem Types: Improper Authorization Vulnerability. Description: The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/us/en/04/sln314610/dell-openmanage-network-manager-security-vulnerabilities - https://www.exploit-db.com/exploits/45852/ - http://www.securityfocus.com/bid/105912
CVE ID: CVE-2018-15768 State: PUBLISHED Published: 2018-11-30T17:00:00Z Last Updated: 2024-09-17T03:59:31.784Z Vendors: Dell Products: OpenManage Network Manager Problem Types: Insecure MySQL Configuration Vulnerability Description: Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105914 - https://www.dell.com/support/article/us/en/04/sln314610/dell-openmanage-network-manager-security-vulnerabilities - https://www.exploit-db.com/exploits/45852/
CVE ID: CVE-2018-15769 State: PUBLISHED Published: 2018-11-16T21:00:00 Last Updated: 2024-08-05T10:01:54.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105929 - https://seclists.or
onal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105929 - https://seclists.org/fulldisclosure/2018/Nov/37 - http://www.securitytracker.com/id/1042057 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.oracle.com/security-alerts/cpuoct2020.html
CVE ID: CVE-2018-15770 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15771 State: PUBLISHED Published: 2018-11-13T14:00:00Z Last Updated: 2024-09-17T03:58:36.708Z Vendors: Dell EMC Products: Dell EMC RecoverPoint, Dell EMC RecoverPoint Virtual Machine (VM) Problem Types: information disclosure vulnerability Description: Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042059 - http://www.securityfocus.com/bid/105916 - https://seclists.or
References: - http://www.securitytracker.com/id/1042059 - http://www.securityfocus.com/bid/105916 - https://seclists.org/fulldisclosure/2018/Nov/34
CVE ID: CVE-2018-15772 State: PUBLISHED Published: 2018-11-13T14:00:00Z Last Updated: 2024-09-17T01:10:33.151Z Vendors: Dell EMC Products: Dell EMC RecoverPoint, Dell EMC RecoverPoint Virtual Machine (VM) Problem Types: uncontrolled resource consumption vulnerability Description: Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the existence of any system file via Boxmgmt CLI. Additional Analyst Notes: - CVE Program Container: References: - http://www.secu
nce of any system file via Boxmgmt CLI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042059 - http://www.securityfocus.com/bid/105916 - https://seclists.org/fulldisclosure/2018/Nov/34
CVE ID: CVE-2018-15773 State: PUBLISHED Published: 2018-12-05T18:00:00Z Last Updated: 2024-09-16T22:14:02.961Z Vendors: Dell Products: Dell Encryption (formerly Dell Data Protection | Encryption) Problem Types: information disclosure vulnerability Description: Dell Encryption (formerly Dell Data Protection | Encryption) v10.1.0 and earlier contain an information disclosure vulnerability. A malicious user with physical access to the machine could potentially exploit this vulnerability to access the unencrypted RegBack folder that contains back-ups of sensitive system files. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/us/en/04/sln314963
Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/us/en/04/sln314963/dell-encryption-enterprise-dell-data-protection-encryption-information-disclosure-vulnerability?lang=en
CVE ID: CVE-2018-15774 State: PUBLISHED Published: 2018-12-13T22:00:00Z Last Updated: 2024-09-17T01:36:18.120Z Severity: LOW (CVSS 3.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: Dell EMC Products: iDRAC Problem Types: Privilege escalation vulnerability. Description: Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23 contain a privilege escalation vulnerability. An authenticated malicious iDRAC user with operator privileges could potentially exploit a permissions check flaw in the Redfish interface to gain administrator access. Additional Analyst Notes: - CVE Program Container: References: - https://w
dfish interface to gain administrator access. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/us/en/19/sln315190/dell-emc-idrac-multiple-vulnerabilities-cve-2018-15774-and-cve-2018-15776-?lang=en - http://www.securityfocus.com/bid/106233
CVE ID: CVE-2018-15775 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15776 State: PUBLISHED Published: 2018-12-13T22:00:00Z Last Updated: 2024-09-16T22:56:03.854Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell EMC Products: iDRAC Problem Types: Improper Error Handling Vulnerability. Description: Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/us/en/19/sln315190/dell-emc-idrac-multiple-vulnerabilities-cve-2018-
References: - https://www.dell.com/support/article/us/en/19/sln315190/dell-emc-idrac-multiple-vulnerabilities-cve-2018-15774-and-cve-2018-15776-?lang=en - http://www.securityfocus.com/bid/106233
CVE ID: CVE-2018-15777 State: REJECTED Published: 2019-02-25T23:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-15778 State: PUBLISHED Published: 2019-02-04T22:00:00Z Last Updated: 2024-09-17T02:00:47.437Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: Dell Networking OS10 Problem Types: This vulnerability could potentially allow an attacker to execute unexpected, dangerous commands directly on the operating system. Description: Dell OS10 versions prior to 10.4.2.1 contain a vulnerability caused by lack of proper input validation on the command-line interface (CLI). Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/sln316095/
CVE ID: CVE-2018-15779 State: REJECTED Published: 2019-02-01T02:00:00 Last Updated: 2019-02-01T01:57:01 Description: No description available.
CVE ID: CVE-2018-15780 State: PUBLISHED Published: 2019-01-03T21:00:00Z Last Updated: 2024-09-17T03:37:26.681Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: RSA Archer Problem Types: improper access control vulnerability Description: RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106396 - https://seclists.org/fulldisclosure/2019/Jan/3
CVE ID: CVE-2018-15781 State: PUBLISHED Published: 2019-02-13T16:00:00Z Last Updated: 2024-09-16T17:48:51.808Z Severity: HIGH (CVSS 7.9 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: Wyse Password Encoder Problem Types: Hard-coded Cryptographic Key vulnerability Description: The Dell Wyse Password Encoder in ThinLinux2 versions prior to 2.1.0.01 contain a Hard-coded Cryptographic Key vulnerability. An unauthenticated remote attacker could reverse engineer the cryptographic system used in the Dell Wyse Password Encoder to discover the hard coded private key and decrypt locally stored cipher text. Additional Analyst Notes: - CVE Program Container: References: - https://w