Lucene search
+L

578 matches found

NVD
NVD
added 2021/12/07 10:15 p.m.31 views

CVE-2021-43963

An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the metadata within sync documents written to the bucket. Users with read access could use these credentials to obtain writ...

8.1CVSS0.00501EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/07 10:15 p.m.21 views

Design/Logic Flaw

An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the metadata within sync documents written to the bucket. Users with read access could use these credentials to obtain writ...

5.5CVSS7.6AI score0.00501EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/07 9:05 p.m.32 views

CVE-2021-43963

An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the metadata within sync documents written to the bucket. Users with read access could use these credentials to obtain writ...

7.9AI score0.00501EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/05 6:15 p.m.11 views

CVE-2021-29753

IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval...

5.9CVSS5.8AI score0.00777EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/05 3:15 a.m.6 views

CVE-2021-25502

A vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov-2021 Release 1 allows attackers to read ESN value without priviledge...

5.5CVSS5.8AI score0.00066EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/05 3:15 a.m.6 views

CVE-2021-25502

A vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov-2021 Release 1 allows attackers to read ESN value without priviledge...

7.9CVSS5.7AI score0.00066EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:00 a.m.11 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the insecure storage of critical information, allows attackers to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the insecure storage of critical information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data...

4.9CVSS6.2AI score0.01035EPSS
SaveExploits0References4Affected Software2
NVD
NVD
added 2021/09/10 4:15 a.m.24 views

CVE-2021-28813

A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have...

9.6CVSS0.01095EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/10 4:15 a.m.6 views

CVE-2021-28813

A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have...

7.5CVSS5.8AI score0.01095EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/10 4:15 a.m.23 views

Design/Logic Flaw

A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have...

5CVSS7.3AI score0.01095EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/09/10 4:00 a.m.27 views

CVE-2021-28813 Insufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch

A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have...

9.6CVSS9.2AI score0.01095EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/10 4:00 a.m.67 views

CVE-2021-28813

CVE-2021-28813 affects QSW-M2116P-2T2S and QNAP switches running QuNetSwitch, where an insecure/storage mechanism could allow a remote attacker to read sensitive information. Affected products/components: QSW-M2116P-2T2S (QuNetSwitch) and various QuNetSwitch platforms. Root cause: insecure storag...

9.6CVSS7.5AI score0.01095EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/08/11 9:15 p.m.11 views

CVE-2017-16632

In SapphireIMS 40971, the password in the database is stored in Base64 format...

7.5CVSS5.8AI score0.0069EPSS
SaveExploits0References2
NVD
NVD
added 2021/06/16 2:15 p.m.23 views

CVE-2021-22914

Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue...

7.5CVSS0.01064EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/06/16 2:15 p.m.7 views

CVE-2021-22914

Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue...

7.5CVSS7AI score0.01064EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/06/16 1:08 p.m.26 views

CVE-2021-22914

Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue...

7.6AI score0.01064EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/16 4:15 a.m.6 views

CVE-2021-28815

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

4.9CVSS5.8AI score0.01711EPSS
SaveExploits1References1
Prion
Prion
added 2021/06/16 4:15 a.m.23 views

Code injection

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

4CVSS4.9AI score0.01711EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/06/16 4:00 a.m.82 views

CVE-2021-28815

CVE-2021-28815: Affected product is QNAP Systems Inc. myQNAPcloud Link running on QTS 4.5.3 (and QuTS hero h4.5.2; QuTScloud c4.5.4). The root cause is insecure storage of sensitive information, allowing remote attackers to read sensitive data through an unrestricted storage mechanism. CVSS detai...

6CVSS5AI score0.01711EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/10 12:00 a.m.13 views

The vulnerability of the IBM Security Verify Access access control system, related to the insecure storage of confidential information, allows attackers to gain unauthorized access to protected data.

The vulnerability of the IBM Security Verify Access system is related to the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4CVSS6.5AI score0.00268EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder