Lucene search
+L

847 matches found

OSV
OSV
•added 2021/08/11 9:15 p.m.•18 views

CVE-2017-16632

In SapphireIMS 40971, the password in the database is stored in Base64 format...

7.5CVSS5.8AI score0.0069EPSS
SaveExploits0References2
NVD
NVD
•added 2021/06/16 2:15 p.m.•32 views

CVE-2021-22914

Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue...

7.5CVSS0.01035EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/06/16 2:15 p.m.•10 views

CVE-2021-22914

Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue...

7.5CVSS7AI score0.01035EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/06/16 1:08 p.m.•37 views

CVE-2021-22914

Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue...

7.6AI score0.01035EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/16 4:15 a.m.•17 views

CVE-2021-28815

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

4.9CVSS5.8AI score0.01726EPSS
SaveExploits1References1
Prion
Prion
•added 2021/06/16 4:15 a.m.•35 views

Code injection

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

4CVSS4.9AI score0.01726EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/06/16 4:00 a.m.•100 views

CVE-2021-28815

CVE-2021-28815: Affected product is QNAP Systems Inc. myQNAPcloud Link running on QTS 4.5.3 (and QuTS hero h4.5.2; QuTScloud c4.5.4). The root cause is insecure storage of sensitive information, allowing remote attackers to read sensitive data through an unrestricted storage mechanism. CVSS detai...

6CVSS5AI score0.01726EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/06/16 12:32 a.m.•11 views

CVE-2021-28815

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

6CVSS5.3AI score0.01726EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/16 12:00 a.m.•12 views

CVE-2021-22914: Insecure Storage of Sensitive Information

Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue...

7.5CVSS5.8AI score0.01035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/06/16 12:00 a.m.•7 views

PT-2021-17937

Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. myQNAPcloud Link versions prior to 2.2.21 on QTS 4.5.3 QNAP Systems Inc. myQNAPcloud Link versions prior to 2.2.21 on QuTS hero h4.5.2 QNAP Systems Inc. myQNAPcloud Link versions prior to 2.2.21 on QuTScloud c4.5.4...

6CVSS0.01726EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/11 12:00 a.m.•8 views

CVE-2021-20396: Insecure Storage of Sensitive Information

IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 196009...

4CVSS5.8AI score0.00249EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/06/10 12:00 a.m.•17 views

The vulnerability of the IBM Security Verify Access access control system, related to the insecure storage of confidential information, allows attackers to gain unauthorized access to protected data.

The vulnerability of the IBM Security Verify Access system is related to the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4CVSS6.5AI score0.00268EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2021/06/09 2:15 p.m.•16 views

CVE-2021-33669

Under certain conditions, SAP Mobile SDK Certificate Provider allows a local unprivileged attacker to exploit an insecure temporary file storage. For a successful exploitation user interaction from another user is required and could lead to complete impact of confidentiality integrity and...

7.8CVSS7.1AI score0.00225EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/09 12:00 a.m.•16 views

The vulnerability of the ajaxhelper.php component of the Nagios Fusion software, which is used for visualizing the operational status of IT infrastructure, allows a hacker to gain access to user passwords.

The vulnerability of the ajaxhelper.php component of the Nagios Fusion software, which is used for visualizing the operational status of IT infrastructure, relates to the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker, operating remotely, to ga...

7.8CVSS6.8AI score0.03589EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2021/06/08 12:00 a.m.•18 views

Rockwell Automation ISaGRAF 安全漏洞

Rockwell Automation ISaGRAF is an automation software technology for creating integrated automation solutions from Rockwell Automation. It is designed to be scalable and portable and is suitable for developing small controllers and large distributed automation systems. A security vulnerability...

7.8CVSS5.8AI score0.00437EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/31 12:00 a.m.•5 views

CVE-2021-20575: Insecure Storage of Sensitive Information

IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system. X-Force ID: 199278...

4CVSS5.8AI score0.00268EPSS
SaveExploits0References2
NVD
NVD
•added 2021/05/26 7:15 p.m.•39 views

CVE-2019-25030

In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage. Popular hashing algorithms based on the Merkle-Damgardconstruction such as MD5 and SHA-1 alone are insufficient in thwarting password...

5.5CVSS0.00216EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/19 12:00 a.m.•7 views

CVE-2020-4765: Insecure Storage of Sensitive Information

IBM Cloud Pak for Multicloud Management prior to 2.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 188902...

4CVSS5.8AI score0.00249EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/14 12:00 a.m.•11 views

CVE-2021-20391: Insecure Storage of Sensitive Information

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999...

4CVSS5.8AI score0.00249EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/05/05 12:00 a.m.•25 views

The vulnerability of the SCADA system of OIK Dispatching NT, related to the insecure storage of critical information, allows a intruder to enhance their privileges.

The vulnerability of the SCADA system of OIK Dispatching is related to the insecure storage of critical information. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS5.5AI score
SaveExploits0References1
Rows per page
Query Builder