Lucene search
+L

1701 matches found

CVE
CVE
added 2019/11/12 10:23 p.m.84 views

CVE-2010-4177

CVE-2010-4177 affects mysql-gui-tools (mysql-query-browser and mysql-admin) prior to 5.0r14+openSUSE-2.3. The underlying issue is an information disclosure: the password of a MySQL user connected to the server is exposed in clear text through the list of running processes. This is a local vulnera...

5.5CVSS5.5AI score0.00313EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2019/11/08 3:15 p.m.9 views

DEBIAN-CVE-2019-3866

An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information...

5.5CVSS6.2AI score0.00339EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/08 3:15 p.m.14 views

CVE-2019-3866

An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information...

5.5CVSS6.5AI score
SaveExploits0References1
OSV
OSV
added 2019/11/08 3:15 p.m.10 views

UBUNTU-CVE-2019-3866

An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information...

5.9CVSS6.5AI score0.00339EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2019/11/08 12:00 a.m.13 views

PT-2019-5309 · Openstack +1 · Openstack-Mistral +1

Name of the Vulnerable Software and Affected Versions: openstack-mistral affected versions not specified Description: An information-exposure issue was found in openstack-mistral where undercloud log files containing clear-text information were made world readable. This could allow a malicious...

7.5CVSS6.4AI score0.0152EPSS
SaveExploits0References18
Fortinet
Fortinet
added 2019/11/08 12:00 a.m.50 views

Console window of FortiClient for Mac OS displays password in clear-text.

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...

2.1CVSS5.1AI score0.00195EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:00 a.m.29 views

Rockwellautomation 1763-l16awa Unspecified Vulnerability

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

5CVSS4.1AI score0.04028EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/11/01 12:00 a.m.31 views

Junos OS: Clear Text Authentication Credentials (JSA10969)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability which is when the user uses console management port to authenticate, the credentials used during device authentication are written to a log file in clear text. This issue does not affect...

5.9CVSS5.8AI score0.00229EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2019/10/30 12:00 a.m.19 views

(0Day) Jenkins Extensive Testing Cleartext Storage of Credentials Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Jenkins Extensive Testing. Authentication is required to exploit this vulnerability. The specific flaw exists within the Extensive Testing plugin. The issue results from storing credentials in...

3.3CVSS1.5AI score
SaveExploits0
CVE
CVE
added 2019/10/28 11:36 p.m.84 views

CVE-2019-4314

CVE-2019-4314 affects IBM Security Guardium Big Data Intelligence (SonarG) 4.0, where sensitive data is stored in cleartext within a resource that may be accessible across control spheres, enabling information disclosure. The NVD entry lists CVSSv3 base score 7.5 (HIGH) with network attack vector...

7.5CVSS7AI score0.00976EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/10/22 3:17 p.m.24 views

Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by a Password Stored in Clear Text vulnerability

Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4307 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG stores user credentials in plain in clear text which can be read by a local user. CVSS...

5.5CVSS0.9AI score0.00279EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2019/10/17 7:15 p.m.11 views

CVE-2019-15626

The Deep Security Manager application Versions 10.0, 11.0 and 12.0, when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability...

7.5CVSS7.1AI score0.01755EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/17 7:15 p.m.29 views

CVE-2019-15626

The Deep Security Manager application Versions 10.0, 11.0 and 12.0, when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability...

7.5CVSS7.5AI score0.01755EPSS
SaveExploits0References1
Prion
Prion
added 2019/10/17 7:15 p.m.26 views

Code injection

The Deep Security Manager application Versions 10.0, 11.0 and 12.0, when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability...

4.3CVSS7.5AI score0.01755EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/10/17 7:09 p.m.35 views

CVE-2019-15626

The Deep Security Manager application Versions 10.0, 11.0 and 12.0, when configured in a certain way, may transmit initial LDAP communication in clear text. This may result in confidentiality impact but does not impact integrity or availability...

7.5AI score0.01755EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/09 8:15 p.m.12 views

CVE-2019-0069

On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...

5.5CVSS5.8AI score0.00229EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/09 8:15 p.m.33 views

CVE-2019-0069

On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...

5.9CVSS5.8AI score0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/10/09 7:26 p.m.51 views

CVE-2019-0069 Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text

On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...

5.9CVSS5.6AI score0.00229EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2019/10/03 7:51 p.m.36 views

CVE-2019-13419

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

7.5CVSS3.3AI score0.00934EPSS
SaveExploits0References3
OSV
OSV
added 2019/10/01 8:15 p.m.27 views

CVE-2019-0231

Handling of the closenotify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This...

7.5CVSS6.6AI score
SaveExploits0References1
Rows per page
Query Builder