Vulnerabilities (CVE)

Filtered by CWE-1270
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-59698 1 Entrust 10 Nshield 5c, Nshield 5c Firmware, Nshield Connect Xc Base and 7 more 2025-12-08 N/A 6.8 MEDIUM
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate attacker to gain access to the EOL legacy bootloader.
CVE-2023-30524 1 Jenkins 1 Report Portal 2025-02-07 N/A 4.3 MEDIUM
Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them.
CVE-2023-2882 1 Cbot 2 Cbot Core, Cbot Panel 2024-11-21 N/A 9.8 CRITICAL
Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
CVE-2023-22644 1 Suse 1 Manager Server 2024-11-21 N/A 5.5 MEDIUM
A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.
CVE-2023-32188 2024-10-16 N/A N/A
A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.