639 matches found
Barco ClickShare Devices Weak Password Requirements (CVE-2019-18828)
Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account present for access via debug interfaces, which are by default not enabled on production devices of the embedded Linux on the ClickShare Button is using a weak password. This plugin...
EUVD-2019-7550
Malware in sbrugna...
EUVD-2021-20866
Malware in sbrugna...
EUVD-2025-24159
Malicious code in bioql PyPI...
EUVD-2023-58504
Malicious code in bioql PyPI...
EUVD-2022-4637
Malicious code in bioql PyPI...
EUVD-2025-14839
Malicious code in bioql PyPI...
EUVD-2025-23517
Malicious code in bioql PyPI...
EUVD-2024-42758
Malicious code in bioql PyPI...
CVE-2025-10880
All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request...
CVE-2025-10879
All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication...
CVE-2025-10879: Insufficiently Protected Credentials
All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication...
CVE-2025-10880: Insufficiently Protected Credentials
All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request...
CVE-2025-10360: Insufficiently Protected Credentials
In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled t...
CVE-2025-42933: Insufficiently Protected Credentials
When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of t...
CVE-2025-41682: Insufficiently Protected Credentials
An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password...
CVE-2025-52549: Insufficiently Protected Credentials
E3 Site Supervisor Control firmware version 2.31F01 generates the root linux password on each boot. An attacker can generate the root linux password for a vulnerable device based on known or easy to fetch parameters...
CVE-2025-52545: Insufficiently Protected Credentials
E3 Site Supervisor Control firmware version 2.31F01 RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services...