PT-2023-21861 · Unknown · Simple Design Daily Journal +1

Name of the Vulnerable Software and Affected Versions: Simple Design Daily Journal version 1.012.GP.B Description: A vulnerability has been found in the SQLite Database component, leading to cleartext storage in a file or on disk. The manipulation can be launched on the local host. The exploit ha...

Exploitable and unpatched KeePass vulnerability: everything you need to know

Detect and mitigate CVE-2023-32784, a vulnerability in KeePass which allows the extraction of the master password in cleartext from the application's memory...

CVE-2022-46680

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic...

Design/Logic Flaw

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic...

CVE-2022-46680

CVE-2022-46680 affects Schneider Electric PowerLogic ION7000/ION9000 family devices (ION9000, ION7400; PM8000; ION8650, ION8800) with the vulnerability described as Cleartext Transmission of Sensitive Information (CWE-319). Root cause: sensitive data can be transmitted in cleartext over the ION/T...

SAP BusinessObjects Business Intelligence Platform Information Disclosure (3302595)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by a information disclosure vulnerability. SAP BusinessObjects Platform - versions 420, 430, Information design tool transmits sensitive information as cleartext in the binaries over...

Schneider Electric PowerLogic 安全漏洞

Schneider Electric PowerLogic is an industrial control device from Schneider Electric, France. Provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices, and operators. A security vulnerability exists in the Schneider Electric PowerLogic...

CVE-2023-33254

There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher privilege level on the Active Directory domain. To exploit this, an authenticated attacker edits the user-authentication settings to specify an...

Authentication flaw

There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher privilege level on the Active Directory domain. To exploit this, an authenticated attacker edits the user-authentication settings to specify an...

CVE-2023-33254

There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher privilege level on the Active Directory domain. To exploit this, an authenticated attacker edits the user-authentication settings to specify an...

Exploit for Cleartext Transmission of Sensitive Information in Keepass

KeePass 2.53/cmdline files and store the pid of ones with t...

CVE-2023-0864

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox UL40/80A, ABB Terra AC wallbox UL32A, ABB Terra AC wallbox CE Terra AC MID, ABB Terra AC wallbox CE Terra AC Juno CE, ABB Terra AC wallbox CE Terra AC PTB, ABB Terra AC wallbox CE Symbiosis, ABB Terra AC wallbox...

CVE-2023-0864

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox UL40/80A, ABB Terra AC wallbox UL32A, ABB Terra AC wallbox CE Terra AC MID, ABB Terra AC wallbox CE Terra AC Juno CE, ABB Terra AC wallbox CE Terra AC PTB, ABB Terra AC wallbox CE Symbiosis, ABB Terra AC wallbox...

Design/Logic Flaw

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox UL40/80A, ABB Terra AC wallbox UL32A, ABB Terra AC wallbox CE Terra AC MID, ABB Terra AC wallbox CE Terra AC Juno CE, ABB Terra AC wallbox CE Terra AC PTB, ABB Terra AC wallbox CE Symbiosis, ABB Terra AC wallbox...

CVE-2023-0864

The CVE-2023-0864 issue affects ABB Terra AC wallbox variants (UL40/80A, UL32A, CE MID, CE Juno CE, CE PTB, Symbiosis, JP) with cleartext transmission of configuration/sensitive data. Root cause: plaintext transmission over BLE, enabling a nearby attacker to access configuration data. Affected ve...

CVE-2023-0864 Configuration data is exchanged in plaintext and could be available to a nearby attacker if present during configuration or usage of the device via Bluetooth Low Energy (BLE).

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox UL40/80A, ABB Terra AC wallbox UL32A, ABB Terra AC wallbox CE Terra AC MID, ABB Terra AC wallbox CE Terra AC Juno CE, ABB Terra AC wallbox CE Terra AC PTB, ABB Terra AC wallbox CE Symbiosis, ABB Terra AC wallbox...

CVE-2023-0864 Configuration data is exchanged in plaintext and could be available to a nearby attacker if present during configuration or usage of the device via Bluetooth Low Energy (BLE).

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox UL40/80A, ABB Terra AC wallbox UL32A, ABB Terra AC wallbox CE Terra AC MID, ABB Terra AC wallbox CE Terra AC Juno CE, ABB Terra AC wallbox CE Terra AC PTB, ABB Terra AC wallbox CE Symbiosis, ABB Terra AC wallbox...

PT-2023-3091 · Abb · Abb Terra Ac Wallbox

Name of the Vulnerable Software and Affected Versions: ABB Terra AC wallbox UL40/80A versions 1.0;0 through 1.5.5 ABB Terra AC wallbox UL32A versions 1.0;0 through 1.6.5 ABB Terra AC wallbox CE Terra AC MID versions 1.0;0 through 1.6.5 ABB Terra AC wallbox CE Terra AC Juno CE versions 1.0;0 throu...

Snap One OvrC Cloud (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Snap One Equipment: OvrC Cloud, OvrC Pro Devices Vulnerabilities: Improper Input Validation, Observable Response Discrepancy, Improper Access Control, Cleartext Transmission of Sensitive Information,...

SUSE CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...