CVE-2022-41876

ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and 1.0.13 are subject to Insecure Storage of Sensitive Information. Unauthenticated GraphQL queries for user accounts can expose password hashes of users that have created or...

CVE-2022-32867: Insecure Storage of Sensitive Information

This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. A user with physical access to an iOS device may be able to read past diagnostic logs...

CVE-2022-28170: Insecure Storage of Sensitive Information

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file...

CVE-2022-3206 Passster < 3.5.5.5.2 - Insecure Storage of Password

The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked...

CVE-2022-3206 Passster < 3.5.5.5.2 - Insecure Storage of Password

The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked...

CVE-2022-41320: Insecure Storage of Sensitive Information

Veritas System Recovery VSR versions 18 and 21 store a network destination password in the Windows registry during configuration of the backup configuration. This vulnerability could provide a Windows user who has sufficient privileges to access a network file system that they were not authorized...

WordPress Passster plugin <= 3.5.5.5.1 - Insecure Storage of Password vulnerability

Insecure Storage of Password vulnerability discovered by Raad Haddad Cloudyrion GmbH in WordPress Passster plugin versions = 3.5.5.5.1. Solution Update the WordPress Passster – Password Protection plugin to the latest available version at least 3.5.5.5.2...

CVE-2022-35513

The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...

CVE-2022-35513

The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...

CVE-2022-35513

CVE-2022-35513 affects Blink1Control2

CVE-2022-35513

The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...

CVE-2022-35513

The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...

CVE-2022-35513

The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...

PT-2022-22877 · Unknown · Blink1Control2

Name of the Vulnerable Software and Affected Versions: Blink1Control2 versions prior to 2.2.9 Description: The issue concerns the use of weak password encryption and an insecure method of storage in the Blink1Control2 application. Recommendations: For versions prior to 2.2.9, update to version...

CVE-2022-35513: Use of a Broken or Risky Cryptographic Algorithm

The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...

Blink1Control2 Encryption Vulnerability

Blink1Control2 is a desktop application by Tod Kurt Personal Developer. It is used to control and hook events to blink1. A security vulnerability exists in Blink1Control2 version 2.2.7 and earlier that stems from the use of weak password encryption and insecure storage methods...

CVE-2022-1021

Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...

CVE-2022-1021

Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...

CVE-2022-1021

Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...

CVE-2022-1021

CVE-2022-1021 affects chatwoot/chatwoot prior to 2.6.0 with insecure storage of sensitive information. The connected documents corroborate this, citing risks around exposure of sensitive data (e.g., authentication-related data) and, in some sources, a cross-site scripting vector that can enable t...