635 matches found
CVE-2023-33263: Insufficiently Protected Credentials
In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. NOTE: this is a product from 2006...
SUSE SLES12 Security Update : curl (SUSE-SU-2023:2225-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2225-1 advisory. This update for curl adds the following feature: Update to version 8.0.1 jscPED-2580 - CVE-2023-28319: use-after-free in SSH sha256...
CVE-2022-40685
Insufficiently protected credentials in the IntelR DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclosure via network access...
CVE-2023-24506 Milesight NCR/Camera CWE-522: Insufficiently Protected Credentials
Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request...
CVE-2023-24506 Milesight NCR/Camera CWE-522: Insufficiently Protected Credentials
Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request...
Design/Logic Flaw
An insufficiently protected credentials vulnerability CWE-522 in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all versions may allow a local attacker with system access to retrieve users' passwords...
CVE-2022-45859
CVE-2022-45859 affects Fortinet FortiNAC: FortiNAC-F 7.2.0 and FortiNAC 9.x (all 9.x releases up to the listed below versions), where an insufficient protection of credentials (CWE-522) vulnerability could allow a local attacker with system access to retrieve users’ passwords. Affected: FortiNAC-...
CVE-2023-28088: Insufficiently Protected Credentials
An HPE OneView appliance dump may expose SAN switch administrative credentials...
CP Plus KVMS Pro
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: CP Plus Equipment: KVMS Pro Vulnerability: Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to retrieve sensitive credentials and control the...
CVE-2023-1518
CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they are insufficiently protected...
CVE-2023-1518: Insufficiently Protected Credentials
CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they are insufficiently protected...
Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2023-083)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-083 advisory. 2024-02-15: CVE-2022-27781 was added to this advisory. A vulnerability was found in curl. This security flaw allows reusing OAUTH2-authenticated connections without properly ensuring that the...
Schneider Electric Modicon PLCs Insufficiently Protected Credentials (CVE-2017-6028)
An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...
K55539088: Intel SSD vulnerabilities CVE-2020-0584, CVE-2020-12309, CVE-2020-12310, CVE-2020-12311
Security Advisory Description CVE-2020-0584 Buffer overflow in firmware for IntelR SSD DC P4800X and P4801X Series, IntelR OptaneTM SSD 900P and 905P Series may allow an unauthenticated user to potentially enable a denial of service via local access. CVE-2020-12309 Insufficiently protected...
K30857274: Intel QAT vulnerability CVE-2020-12333
Security Advisory Description Insufficiently protected credentials in the IntelR QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2020-12333 Impact There is no impact; F5 products are not affected by this...
CVE-2022-40678: Insufficiently Protected Credentials
An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow a local attacker with database access to recover user passwords...
CVE-2022-41614: Insufficiently Protected Credentials
Insufficiently protected credentials in the IntelR ON Event Series Android application before version 2.0 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-43969: Insufficiently Protected Credentials
Ricoh mpc4504ex devices with firmware 1.06 mishandle credentials...