Lucene search
K

569 matches found

OSV
OSV
added 2023/12/14 12:0 a.m.1 views

UBUNTU-CVE-2023-49347

Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false...

7.8CVSS5.8AI score0.00303EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:0 a.m.5 views

The vulnerability of the Digital Guardian Agent, which stems from the insecure storage of confidential information, allows attackers to delete this application.

The vulnerability of the Digital Guardian Agent relates to the insecure storage of confidential information. Exploiting this vulnerability could allow a hacker to delete this application...

6CVSS6.2AI score0.00306EPSS
Exploits2References5Affected Software1
NVD
NVD
added 2023/10/17 1:15 p.m.15 views

CVE-2023-43777

Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. This software has a password protection functionality to secure the project file from unauthorized access. This password was being stored...

6.5CVSS6.1AI score0.00278EPSS
Exploits0References1
Prion
Prion
added 2023/10/17 1:15 p.m.21 views

Design/Logic Flaw

Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. This software has a password protection functionality to secure the project file from unauthorized access. This password was being stored...

4CVSS6.5AI score0.00278EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/17 12:49 p.m.11 views

CVE-2023-43777 Insecure storage of password in easySoft

Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. This software has a password protection functionality to secure the project file from unauthorized access. This password was being stored...

5.9CVSS6.8AI score0.00278EPSS
Exploits0References1
CVE
CVE
added 2023/10/17 12:49 p.m.41 views

CVE-2023-43777

CVE-2023-43777 affects Eaton easySoft software used to program easy controllers and displays. The root issue is insecure storage of the project password, which could be retrieved by skilled adversaries, leading to potential unauthorized access to protected files. Documents confirm the password pr...

6.5CVSS6.1AI score0.00278EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/10/11 6:15 a.m.17 views

CVE-2022-42451

Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user...

4.6CVSS4.5AI score0.0015EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/10/11 5:1 a.m.18 views

CVE-2022-42451 HCL BigFix Patch Management is vulnerable to insecurely stored credentials

Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a local privileged user...

4.6CVSS6.6AI score0.0015EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.6 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in the insufficient protection of registration data, allowing attackers to obtain confidential information.

The vulnerability of backup and data recovery software on computers and servers related to Acronis Agent lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to obtain confidential information...

5.5CVSS5.5AI score0.00237EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/21 12:0 a.m.4 views

The vulnerability of the MODULYS GP (MOD3GP-SY-120K) web-based management application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the MODULYS GP MOD3GP-SY-120K web-based management application relates to the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.1AI score0.00508EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2023/09/19 10:15 a.m.15 views

CVE-2023-32184

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a...

7.8CVSS7.6AI score0.00281EPSS
Exploits1References1
Prion
Prion
added 2023/09/19 10:15 a.m.23 views

Information disclosure

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a...

4.4CVSS7.6AI score0.00281EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/19 9:42 a.m.16 views

CVE-2023-32184

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a...

7.8CVSS7AI score0.00281EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/09/19 12:0 a.m.3 views

openSUSE opensuse-welcome Security Vulnerabilities

openSUSE is a set of Linux-based free operating systems and open source community projects from SUSE Germany. A security vulnerability exists in opensuse-welcome versions 0.1 through 0.1.9+git.35.4b9444a, which stems from an issue with the insecure storage of sensitive information that could allo...

7.8CVSS7AI score0.00281EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/09/18 7:29 p.m.16 views

CVE-2023-41965 Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information

Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process...

7.5CVSS7.7AI score0.00508EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/09/18 7:29 p.m.17 views

CVE-2023-41965 Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information

Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process...

7.5CVSS7.7AI score0.00508EPSS
Exploits0References1
OSV
OSV
added 2023/09/12 10:15 a.m.4 views

CVE-2023-40728

A vulnerability has been identified in QMS Automotive All versions V12.39. The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service...

7.8CVSS6.2AI score0.0019EPSS
Exploits0References1
NVD
NVD
added 2023/09/12 9:15 a.m.17 views

CVE-2023-37879

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

7.5CVSS6.6AI score0.0045EPSS
Exploits0References1
Prion
Prion
added 2023/09/12 9:15 a.m.24 views

Information disclosure

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

5CVSS7.4AI score0.0045EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/09/12 8:15 a.m.126 views

CVE-2023-37879

CVE-2023-37879 affects Wing FTP Server (User Web Client) up to version 7.2.0, where insecure storage of sensitive information enables information elicitation. Multiple sources confirm the issue as a sensitive-info disclosure via the User Web Client, with impact on confidentiality and no indicatio...

7.5CVSS6.6AI score0.0045EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder