878 matches found
CVE-2023-38064
In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log...
CVE-2023-23348: Insecure Storage of Sensitive Information
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed...
WordPress plugin MainWP Child has a vulnerability related to information leakage.
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...
ABB My Control System Insecure Storage Unauthorized Access
The vulnerability of the web interface of the ABB My Control System platform relates to the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2023-32415: Insecure Storage of Sensitive Information
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to read sensitive location information...
CVE-2023-26427: Insecure Storage of Sensitive Information
Default permissions for a properties file were too permissive. Local system users could read potentially sensitive information. We updated the default permissions for noreply.properties set during package installation. No publicly available exploits are known...
CVE-2023-29757: Insecure Storage of Sensitive Information
An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...
CVE-2023-29755: Insecure Storage of Sensitive Information
An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files...
Schweitzer Engineering Laboratories RTAC Insecure Storage of Sensitive Information (CVE-2023-31150)
A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11-15 for more details. This plugin only...
Radancy: insecure storage of information, you can view any file uploaded to the server without authentication and only with a single link
Domain and URL: http://███ https://███████ https://████/maximum-wiki-prod-app/ Summary: From a single link I have access to a multitude of uploaded files on the server. All I have to do is search for keywords such as "png" or "user" and I can retrieve the target file without authentication, witho...
CVE-2023-29727: Insecure Storage of Sensitive Information
The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause...
Security Bulletin: IBM InfoSphere Information Server is vulnerable due to insecure storage of sensitive information (CVE-2023-22878)
Summary A vulnerability due to insecure storage of sensitive information was addressed in InfoSphere Information Server. Vulnerability Details CVEID:CVE-2023-22878 DESCRIPTION: IBM InfoSphere Information Server stores user credentials in plain clear text which can be read by a local user. CVSS Ba...
CVE-2022-44619
Insecure storage of sensitive information in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-43475
Insecure storage of sensitive information in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-43475
Insecure storage of sensitive information in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
Privilege escalation
Insecure storage of sensitive information in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
Privilege escalation
Insecure storage of sensitive information in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-43475
Insecure storage of sensitive information in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-43475
Insecure storage of sensitive information in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-44619
Insecure storage of sensitive information in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access...