CVE-2020-22783

CVE-2020-22783 affects Etherpad/Lite prior to 1.8.3. The root issue is insecure storage of passwords in the database and in log files across all supported database backends. This leads to potential exposure of user credentials. The CVE entries consistently describe this as a vulnerability in vers...

PT-2021-2756

Name of the Vulnerable Software and Affected Versions: ОИК Диспетчер НТ affected versions not specified Description: The issue is related to the insecure storage of critical information in the SCADA system. Exploitation of this issue may allow an attacker to elevate their privileges...

CVE-2021-26909

Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent...

The vulnerability of the SLURM resource manager, related to the insecure storage of confidential information, allows a perpetrator to gain access to confidential data.

The vulnerability of the SLURM resource manager is related to the insecure storage of confidential information. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

CVE-2021-28653

The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware...

CVE-2021-28653

CVE-2021-28653 affects iOS and macOS apps prior to 1.4.1 for Western Digital G‑Technology ArmorLock NVMe SSD. The vulnerability arises from insecure key storage: the app stores keys using a non‑preferred mechanism when Secure Enclave is available but biometric hardware is absent. This can lead to...

西部数据 Western Digital G-Technology ArmorLock NVMe SSD 安全漏洞

The Western Digital G-Technology ArmorLock NVMe SSD is a firmware from Western Digital, Inc. It provides a computer storage device made with integrated circuits. A security vulnerability exists in Western Digital G-Technology ArmorLock NVMe SSDs, which stems from an insecure storage key. The...

CVE-2021-28653: Insecure Storage of Sensitive Information

The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware...

PT-2021-17886

Name of the Vulnerable Software and Affected Versions: Western Digital G-Technology ArmorLock NVMe SSD apps versions prior to 1.4.1 Description: The issue concerns the insecure storage of keys in the iOS and macOS apps for the Western Digital G-Technology ArmorLock NVMe SSD. Specifically, these...

Google Play Diibear 安全漏洞

Google Play Diibear is an application from Google Play. It provides a feature that allows parents to use the application to stay in touch with the kindergarten and get information about their children's learning and play as well as kindergarten newsletters and announcements. A security...

Gitlab -- Multiple vulnerabilities

Gitlab reports: JWT token leak via Workhorse Stored XSS in wiki pages Group Maintainers are able to use the Group CI/CD Variables API Insecure storage of GitLab session keys...

CVE-2020-4726: Insecure Storage of Sensitive Information

The IBM Application Performance Monitoring UI IBM Cloud APM 8.1.4 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 187975...

CVE-2021-20445

IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication credentials. IBM X-Force ID: 196621...

Security Bulletin: IBM Maximo Data Loader (maxloader) shipped with IBM Maximo for Civil Infrastructure is vulnerable to autocomplete HTML Attribute not disabled for password field

Summary There is autocomplete HTML attribute not disabled for password field in Maximo Data Loader maxloader which is shipped with IBM Maximo for Civil Infrastructure. It may be possible to bypass the web application's authentication mechanism. Vulnerability Details CVEID: CVE-2021-20445...

IBM Maximo for Civil Infrastructure 信息泄露漏洞

IBM Maximo for Civil Infrastructure integrates inspection, defect tracking and maintenance activities to help organizations improve asset life, keep critical systems up and running and reduce the total cost of ownership of civil infrastructure. An information disclosure vulnerability exists in IB...

CVE-2021-27170: Insecure Storage of Sensitive Information

An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet...

CVE-2021-25776: Insecure Storage of Sensitive Information

In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters...

PT-2021-5234

Name of the Vulnerable Software and Affected Versions OPPO 5G router affected versions not specified Description The issue is related to the insecure storage of confidential information in the OPPO 5G router. Exploitation of this issue could allow a remote attacker to gain unauthorized access to...

CVE-2020-29603: Insecure Storage of Sensitive Information

In manageprojeditpage.php in MantisBT before 2.24.4, any unprivileged logged-in user can retrieve Private Projects' names via the manageprojeditpage.php projectid parameter, without having access to them...

CVE-2020-4871: Insecure Storage of Sensitive Information

IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834...