Lucene search
+L

8897 matches found

Cvelist
Cvelist
added 2023/10/17 12:00 a.m.54 views

CVE-2023-27132

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product...

9.9AI score0.00912EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2023/10/15 9:30 p.m.74 views

Authorization Header forwarded on redirect

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect i.e., a redirect that differs in host, port, or scheme. This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this...

6.1CVSS6.8AI score0.00516EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2023/10/15 7:15 p.m.36 views

CVE-2018-25091

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect i.e., a redirect that differs in host, port, or scheme. This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this...

6.1CVSS9.8AI score
SaveExploits0References3
Prion
Prion
added 2023/10/15 7:15 p.m.51 views

Authorization

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect i.e., a redirect that differs in host, port, or scheme. This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this...

5.8CVSS7.7AI score0.03938EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2023/10/15 7:15 p.m.35 views

CVE-2018-25091

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect i.e., a redirect that differs in host, port, or scheme. This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this...

6.1CVSS6.8AI score0.00516EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2023/10/15 12:00 a.m.30 views

CVE-2018-25091

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect i.e., a redirect that differs in host, port, or scheme. This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this...

7.1AI score0.00516EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:00 a.m.10 views

The vulnerability of the FortiOS operating system, related to the exposure of information through query strings, allows attackers to view open text passwords of deleted services such as RDP or VNC.

The vulnerability of the FortiOS operating system’s request method is related to the disclosure of information through the request strings. Exploiting this vulnerability allows a malicious actor to remotely access open text passwords of deleted services, such as RDP or VNC...

7.8CVSS7.1AI score0.00879EPSS
SaveExploits0References2Affected Software1
Palo Alto Networks
Palo Alto Networks
added 2023/10/11 4:00 p.m.29 views

Cortex XSOAR: Cleartext Exposure of Client Certificate Key in Kafka v3 Integration

A problem with the Cortex XSOAR Kafka v3 integration can result in the cleartext exposure of the configured Kafka client certificate key. Work around: No work around available...

6.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/11 12:00 a.m.50 views

GLSA-202310-12 : curl: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202310-12 curl: Multiple Vulnerabilities - A vulnerability exists in curl 7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an...

9.8CVSS8.3AI score0.78483EPSS
SaveExploits21References26
OSV
OSV
added 2023/10/09 8:15 p.m.10 views

CVE-2023-5461

A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unknown function of the component Modbus Handler. The manipulation leads to cleartext transmission of sensitive information. It is possible to launch the attack remotely. The...

5.9CVSS4.2AI score0.00398EPSS
SaveExploits0References3
NVD
NVD
added 2023/10/09 8:15 p.m.34 views

CVE-2023-5461

A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unknown function of the component Modbus Handler. The manipulation leads to cleartext transmission of sensitive information. It is possible to launch the attack remotely. The...

5.9CVSS4.7AI score0.00398EPSS
SaveExploits0References3
Prion
Prion
added 2023/10/09 8:15 p.m.33 views

Design/Logic Flaw

A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unknown function of the component Modbus Handler. The manipulation leads to cleartext transmission of sensitive information. It is possible to launch the attack remotely. The...

2.6CVSS5.8AI score0.00398EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/09 8:00 p.m.16 views

CVE-2023-5461 Delta Electronics WPLSoft Modbus cleartext transmission

A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unknown function of the component Modbus Handler. The manipulation leads to cleartext transmission of sensitive information. It is possible to launch the attack remotely. The...

3.7CVSS6.8AI score0.00398EPSS
SaveExploits0References3
CVE
CVE
added 2023/10/09 8:00 p.m.68 views

CVE-2023-5461

Delta Electronics WPLSoft 2.51 is affected by a vulnerability in the Modbus Handler that permits cleartext transmission of sensitive information. The issue can be exploited remotely with high attack complexity and no privileges required; exploitation is possible without user interaction. Public d...

5.9CVSS4.7AI score0.00398EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/10/09 8:00 p.m.59 views

CVE-2023-5461 Delta Electronics WPLSoft Modbus cleartext transmission

A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unknown function of the component Modbus Handler. The manipulation leads to cleartext transmission of sensitive information. It is possible to launch the attack remotely. The...

3.7CVSS5.9AI score0.00398EPSS
SaveExploits0References3
NVD
NVD
added 2023/10/09 1:15 p.m.33 views

CVE-2023-5100

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted...

6.5CVSS5.9AI score0.0035EPSS
SaveExploits0References3
Prion
Prion
added 2023/10/09 1:15 p.m.24 views

Design/Logic Flaw

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted...

4.3CVSS6.3AI score0.0035EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/09 12:05 p.m.11 views

CVE-2023-5100

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted...

5.9CVSS6.8AI score0.0035EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/10/09 12:05 p.m.49 views

CVE-2023-5100

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted...

5.9CVSS6.5AI score0.0035EPSS
SaveExploits0References3
CVE
CVE
added 2023/10/09 12:05 p.m.63 views

CVE-2023-5100

CVE-2023-5100 describes cleartext transmission of sensitive information in the SICK APU RDT400, enabling an unprivileged remote attacker to retrieve data by intercepting unencrypted network traffic. The vulnerability affects the SICK APU RDT400 component; the root cause is plaintext communication...

6.5CVSS6.3AI score0.0035EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder