CVE-2019-15085

An issue was discovered in PRiSE adAS 1.7.0. The current database password is embedded in the change password form...

PT-2019-13976

Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0 Description An issue was discovered where the current database password is embedded in the change password form, potentially exposing it. Recommendations For PRiSE adAS version 1.7.0, consider removing the embedded...

CVE-2019-15085: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in PRiSE adAS 1.7.0. The current database password is embedded in the change password form...

Design/Logic Flaw

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password SEC-234...

CVE-2017-18432

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password SEC-234...

CVE-2017-18432: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password SEC-234...

PT-2019-11525

Name of the Vulnerable Software and Affected Versions: MailCleaner versions prior to c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 Description: The issue allows for unauthenticated disclosure of MySQL database password information. This can lead to the disclosure of MySQL database content, including...

Symphony Project sfDoctrinesfPropel 1.x Database Password Disclosure

Exploit Title : Symphony Project sfDoctrinesfPropel 1.x Database Password Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 10/05/2019 Vendor Homepage : symfony.com Information : symfony-project.org/reference/14/en/07-Databases Software Versions : 1.x a...

CVE-2019-3716

RSA Archer versions, prior to 6.5 SP2, contain an information exposure vulnerability. The database connection password may get logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed password to use it in further...

H2 Database 1.4.196 - Remote Code Execution

H2 Database 1.4.196 - Remote Code Execution Exploit Title: H2 Database 1.4.196 - Remote Code Execution Google Dork: N/A Date: 2018-09-24 Exploit Author: h4ckNinja Vendor Homepage: https://www.h2database.com/ Software Link: http://www.h2database.com/h2-2018-03-18.zip Version: 1.4.196 and 1.4.197...

CVE-2018-14328

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, or /privacy&terms, as demonstrated by reading database username...

Information disclosure

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, or /privacy&terms, as demonstrated by reading database username...

Information disclosure

ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engine-backup was run with one of the options "--provisiondb", the database username and password were logged in cleartext. Sharing the provisioning log might inadvertently leak database...

CVE-2018-1072

CVE-2018-1072 affects ovirt-engine prior to 4.2.2, where engine-backup logging could expose database credentials. The root cause is unfiltered passwords being written to provisioning logs when using --provision*db, leading to potential disclosure of usernames and passwords via shared logs. Public...

Red Hat ovirt-engine Information Disclosure Vulnerability

Red Hat oVirt is an open source virtualization management platform from Red Hat, an open source version of RHEV Platform for Enterprise Virtualization, consisting of the oVirt-node client and the overt-engine management side. overt-engine is one of the control center components, which is capable ...

CVE-2018-6619

CVE-2018-6619 affects Easy Hosting Control Panel (EHCP) v0.37.12.b. The vulnerability stems from the use of a weak hashing algorithm without a salt for database passwords (e.g., MD5), making it easier for attackers to crack passwords. Multiple connected sources corroborate insecure cryptography a...

Multiple Vulnerabilities in CoverCMS V1.16

CoverCMS is a content management system CMS. The system features multi-content distribution, scalability and multi-content type support. CoverCMS V1.16 suffers from reinstallation, information leakage, brute force, stored cross-site scripting and reflected cross-site scripting vulnerabilities...

GHSA-VQCM-7F7F-R539 brbackup exposes database password to unauthorized users

lib/brbackup.rb in the brbackup gem 0.1.1 for Ruby places the database password on the mysql command line, which allows local users to obtain sensitive information by listing the process...

brbackup exposes database password to unauthorized users

lib/brbackup.rb in the brbackup gem 0.1.1 for Ruby places the database password on the mysql command line, which allows local users to obtain sensitive information by listing the process...

NetApp OnCommand API Services and Service Level Manager Information Disclosure Vulnerability

NetApp OnCommand API Services and Service Level Manager are both products of the U.S. NetApp OnCommand API Services is a set of API management tools.Service Level Manager is service content management software. An information disclosure vulnerability exists in NetApp OnCommand API Services versio...