Broadcom Symantec IT Management Suite 安全漏洞

Broadcom Symantec IT Management Suite is a software for managing the configuration of remediation applications and operating systems from Broadcom Corporation USA. A security vulnerability exists in Broadcom Symantec IT Management Suite that originates from account connection credentials that can...

CVE-2025-34057

An information disclosure vulnerability exists in Ruijie NBR series routers known to affect NBR2000G, NBR1300G, and NBR1000 models via the /WEBVMS/LEVEL15/ endpoint. By crafting a specific POST request with modified Cookie headers and specially formatted parameters, an unauthenticated attacker ca...

CVE-2023-28085

An HPE OneView Global Dashboard OVGD appliance dump may expose OVGD user account credentials...

CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...

CVE-2019-14299

Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local account credentials by brute force...

CVE-2025-46746

An administrator could discover another account's credentials...

CVE-2025-46739

An unauthenticated user could discover account credentials via a brute-force attack without rate limiting...

CVE-2025-46746

CVE-2025-46746 describes an vulnerability where an administrator could discover another account’s credentials. Connected sources tie this to Schweitzer Engineering Laboratories products (e.g., SEL-5033 acSELerator RTAC Software, SEL-5702, SEL-5035; PT-2025-20718 references SEL Blueframe OS; CNNVD...

CVE-2025-46746 Error Message Contains Sensitive Information

An administrator could discover another account's credentials...

CVE-2025-46746 Error Message Contains Sensitive Information

An administrator could discover another account's credentials...

CVE-2025-46739 Improper Restriction of Excessive Authentication Attempts

An unauthenticated user could discover account credentials via a brute-force attack without rate limiting...

CVE-2025-46739 Improper Restriction of Excessive Authentication Attempts

An unauthenticated user could discover account credentials via a brute-force attack without rate limiting...

CVE-2025-46739

CVE-2025-46739 describes unauthenticated brute-force against accounts with no rate limiting, potentially exposing credentials. Connected sources indicate affected Schweitzer Engineering Laboratories products (e.g., SEL-5033 acSELerator RTAC software and related SEL devices; Blueframe OS) but do n...

PT-2025-20718 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An administrator could discover another account's credentials. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-20711 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated user could discover account credentials via a brute-force attack without rate limiting. Recommendations: At the moment, there is no information about a newer version that...

Schweitzer Engineering Laboratories多款产品 安全漏洞

Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software and more are products of Schweitzer Engineering Laboratories, Inc. of the U.S.A. Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software is a graphical, easy-to-use tool that helps users quickly and easily...

GO-2025-3645 Kubernetes did not effectively clear service account credentials in k8s.io/kubernetes

Kubernetes did not effectively clear service account credentials in k8s.io/kubernetes...

CVE-2025-0760

A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption...

CVE-2025-0760 Stored Credential Disclosure Vulnerability

A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption...

CVE-2025-0760

CVE-2025-0760 describes a credential disclosure in Tenable Identity Exposure prior to version 3.77.9. The root cause is lack of encryption for stored SMTP credentials, allowing an administrator to extract them. The CVSS v3.1 base metrics indicate a Low impact (AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)...