Lucene search
+L

365 matches found

CNVD
CNVD
•added 2021/05/07 12:00 a.m.•46 views

Moxa NPort IA5150A Series Credential Explicit Storage Vulnerability

Moxa NPort IA5150A Series is a set of industrial control device servers.The Moxa NPort IA5150A Series is vulnerable to a credential plaintext storage vulnerability, which can be exploited by remote attackers to submit ad hoc requests that can obtain sensitive information...

7.5CVSS3.7AI score0.01142EPSS
SaveExploits0References1
OSV
OSV
•added 2021/02/18 3:15 p.m.•10 views

CVE-2021-20445

IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication credentials. IBM X-Force ID: 196621...

6.5CVSS5.8AI score0.01263EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/02/17 12:00 a.m.•8 views

CVE-2021-20445

IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication credentials. IBM X-Force ID: 196621...

6.5CVSS6.5AI score0.01263EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2021/01/13 12:00 a.m.•19 views

Multiple Cisco Products Log Information Disclosure Vulnerability

Cisco Unity Connection UC and so on are the products of the American Cisco Cisco company.Cisco Unity Connection is a set of voice message platform.Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call processing component of the unified communications system. Cisco Unified...

6.5CVSS5.8AI score0.00908EPSS
SaveExploits0References4
CVE
CVE
•added 2021/01/08 3:13 p.m.•65 views

CVE-2020-5805

In Marvell QConvergeConsole GUI

9CVSS8.5AI score0.00909EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/12/22 9:18 p.m.•37 views

CVE-2020-24680 Improper Credential Storage in Symphony Plus

In S+ Operations and S+ Historian, the passwords of internal users not Windows Users are encrypted but improperly stored in a database...

7CVSS6.9AI score0.00277EPSS
SaveExploits0References2
NVD
NVD
•added 2020/12/16 4:15 p.m.•26 views

CVE-2019-14477

AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or encrypted...

5.5CVSS5.6AI score0.00281EPSS
SaveExploits0References2
OSV
OSV
•added 2020/12/16 4:15 p.m.•16 views

CVE-2019-14477

AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or encrypted...

5.5CVSS6.1AI score0.00281EPSS
SaveExploits0References2
Prion
Prion
•added 2020/12/16 4:15 p.m.•18 views

Input validation

AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or encrypted...

2.1CVSS5.6AI score0.00281EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/12/16 3:38 p.m.•56 views

CVE-2019-14477

CVE-2019-14477 affects AdRem NetCrunch 10.6.0.4587. The issue is improper credential storage: the internal user database is readable by low-privileged users and passwords are weakly encoded or encrypted. No exploitation details are provided in the connected documents.

5.5CVSS5.5AI score0.00281EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2020/12/16 12:00 a.m.•13 views

AdRem NetCrunch Trust Management Issues Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. AdRem NetCrunch 10.6.0.4587 suffers from a Trust Management Issue...

5.5CVSS6.1AI score0.00281EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2020/11/18 5:40 p.m.•29 views

CVE-2020-26079 Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability

A vulnerability in the web UI of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to obtain hashes of user passwords on an affected device. The vulnerability is due to insufficient protection of user credentials. An attacker could exploit this vulnerability by...

4.1CVSS5.1AI score0.00974EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2020/11/18 12:00 a.m.•16 views

Cisco IoT Field Network Director 安全漏洞

Cisco IoT Field Network Director FND is a network management system for large-scale FAN deployments. A credentials insecure storage vulnerability exists in Cisco IoT Field Network Director versions prior to 4.6.1. The vulnerability stems from inadequate protection of user credentials. An attacker...

4.9CVSS5.8AI score0.00974EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/10/14 12:00 a.m.•42 views

The vulnerability of D-Link DSL-2875AL and DSL-2877AL router microprogramming software, related to unencrypted storage of user credentials, allows a intruder to gain unauthorized access to protected information.

The vulnerability of D-Link DSL-2875AL and DSL-2877AL router microprogramming systems lies in the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.01339EPSS
SaveExploits1References4Affected Software2
OSV
OSV
•added 2020/09/22 2:15 p.m.•9 views

CVE-2020-4619

IBM Data Risk Manager iDNA 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976...

6.5CVSS6.3AI score0.00706EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/08/13 4:15 a.m.•7 views

CVE-2020-7307

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention DLP for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials...

5.2CVSS5.7AI score0.00261EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/07/23 9:15 p.m.•13 views

CVE-2020-7517

A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder Version 1.4.7.2 and older which could allow an attacker to read user credentials...

5.5CVSS5.8AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
•added 2020/07/02 5:15 a.m.•12 views

CVE-2020-3391

A vulnerability in Cisco Digital Network Architecture DNA Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to insecure storage of certain unencrypted credentials on an affected device. An attacker could exploit this...

6.5CVSS6.7AI score0.01307EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/07/02 12:00 a.m.•14 views

Cisco Digital Network Architecture Center Information Disclosure Vulnerability (CNVD-2020-45582)

Cisco Digital Network Architecture Center DNA Center is a set of digital network architecture solutions from the U.S. company Cisco Cisco. The program can extend and protect devices, applications, etc. within the network. An information disclosure vulnerability exists in Cisco DNA Center versions...

6.5CVSS6.2AI score0.01307EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/22 2:35 p.m.•36 views

CVE-2019-19105 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials

The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user accounts and other configuration's credentials in plaintext...

6.2CVSS6.4AI score0.00298EPSS
SaveExploits0References1
Rows per page
Query Builder