Lucene search
+L

8927 matches found

OSV
OSV
added 2022/06/02 2:15 p.m.12 views

CVE-2022-29733

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack...

5.9CVSS6.2AI score0.00699EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.6 views

CVE-2022-29733

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack...

5.9CVSS5.9AI score0.00699EPSS
SaveExploits2References3
NVD
NVD
added 2022/06/02 2:15 p.m.25 views

CVE-2022-29733

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack...

5.9CVSS0.00699EPSS
SaveExploits2References2
Prion
Prion
added 2022/06/02 2:15 p.m.26 views

Information disclosure

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack...

4.3CVSS5.6AI score0.00699EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2022/05/27 12:56 p.m.43 views

CVE-2022-29733

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allows attackers to intercept HTTP Cookie authentication credentials via a man-in-the-middle attack...

5.8AI score0.00699EPSS
SaveExploits2References2
CVE
CVE
added 2022/05/27 12:56 p.m.115 views

CVE-2022-29733

CVE-2022-29733 affects Delta Controls enteliTOUCH, versions 3.40.3935, 3.40.3706, and 3.33.4005. The root cause is cleartext transmission/storage of sensitive information in HTTP cookies, enabling a man‑in‑the‑middle attacker to intercept cookie authentication credentials. Multiple sources (NVD e...

5.9CVSS5.6AI score0.00699EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2022/05/25 9:15 p.m.10 views

CVE-2022-26077

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff...

7.5CVSS5.8AI score0.01138EPSS
SaveExploits1References1
NVD
NVD
added 2022/05/25 9:15 p.m.24 views

CVE-2022-26077

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff...

7.5CVSS0.01138EPSS
SaveExploits1References1
Prion
Prion
added 2022/05/25 9:15 p.m.17 views

Design/Logic Flaw

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff...

5CVSS7.2AI score0.01138EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/25 8:15 p.m.28 views

CVE-2022-26077

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff...

7.5CVSS7.4AI score0.01138EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/25 8:15 p.m.97 views

CVE-2022-26077

Open Automation Software OAS Platform V16.00.0112 is affected by CVE-2022-26077 via the OAS Engine configuration communications, where cleartext transmission allows network sniffing to disclose sensitive information. The root cause is unencrypted configuration traffic over the OAS Engine, enablin...

7.5CVSS7.3AI score0.01138EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/05/25 2:15 p.m.9 views

CVE-2021-32966

Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may allow an attacker to remotely read LDA...

7.5CVSS5.8AI score0.00458EPSS
SaveExploits0References1
NVD
NVD
added 2022/05/25 9:15 a.m.29 views

CVE-2022-21951

A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This...

6.8CVSS0.00388EPSS
SaveExploits1References2
Prion
Prion
added 2022/05/25 9:15 a.m.24 views

Design/Logic Flaw

A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This...

3.6CVSS6.5AI score0.00388EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/05/25 8:15 a.m.23 views

CVE-2022-21951 Rancher: Weave CNI password is not set if RKE template is used with CNI value overridden

A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This...

6.8CVSS6.7AI score
SaveExploits0References4
Cvelist
Cvelist
added 2022/05/25 8:15 a.m.35 views

CVE-2022-21951 Rancher: Weave CNI password is not set if RKE template is used with CNI value overridden

A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This...

6.8CVSS6.6AI score0.00388EPSS
SaveExploits1References2
CVE
CVE
added 2022/05/25 8:15 a.m.122 views

CVE-2022-21951

The CVE-2022-21951 issue affects SUSE Rancher (Rancher) where a Cleartext Transmission of Sensitive Information vulnerability allows an attacker on the network to read and modify network data. The root cause is missing encryption of data transmitted over the network when a cluster is created from...

6.8CVSS6.4AI score0.00388EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/05/25 12:00 a.m.22 views

PT-2022-17655 · Open Automation · Open Automation Software Oas Platform

Name of the Vulnerable Software and Affected Versions: Open Automation Software OAS Platform version 16.00.0112 Description: A cleartext transmission of sensitive information issue exists in the OAS Engine configuration communications functionality. This can be exploited through a targeted networ...

7.5CVSS7.2AI score0.01138EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/25 12:00 a.m.10 views

CVE-2022-21951

A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This...

6.8CVSS6.7AI score0.00388EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/05/25 12:00 a.m.13 views

PT-2022-15200

Name of the Vulnerable Software and Affected Versions SUSE Rancher versions prior to 2.5.14 SUSE Rancher versions prior to 2.6.5 Description A Cleartext Transmission of Sensitive Information issue in SUSE Rancher allows attackers on the network to read and change network data due to missing...

6.8CVSS6.7AI score0.00388EPSS
SaveExploits1References7
Rows per page
Query Builder