CVE-2021-26908: Insertion of Sensitive Information into Log File

Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent...

Privilege escalation

A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesystem as root. ethtraceroute is shipped with setuid permissions enabled and is owned by the root use...

CVE-2021-26908

Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent...

CVE-2020-11923

An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged...

Design/Logic Flaw

An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged...

PT-2021-9429 · Unknown · Wiz Colors A60

Name of the Vulnerable Software and Affected Versions: WiZ Colors A60 version 1.14.0 Description: An issue was discovered where API credentials are locally logged, potentially exposing sensitive information. Recommendations: For WiZ Colors A60 version 1.14.0, consider restricting access to the...

WiZ Connected WiZ Colors A60 安全漏洞

WiZ Connected WiZ Colors A60 is a smart LED light from China-based WiZ Connected. A security vulnerability exists in WiZ Colors A60 1.14.0 that stems from API credentials being logged locally...

Cisco IOS and IOS XE Elevation of Privilege Vulnerability

Cisco IOS is an operation and maintenance system developed by Cisco for its network equipment, where users set up the functions of the network equipment through the command line human-machine interface. IOS XE is a modular operating system based on Linux kernel developed for its network equipment...

Microsoft Windows Admin Center 安全漏洞

Microsoft Windows Admin Center is a locally deployed browser-based application from Microsoft USA. The program is primarily used to manage servers, clusters, and more. A security vulnerability exists in Microsoft Windows Admin Center. The following products and versions are affected: Windows Admi...

IBM Application Performance Management Security Vulnerability

IBM Application Performance Management APM is a suite of IT service management software from IBM in the United States. The software is primarily used to monitor and manage cloud, on-premise and hybrid applications, and IT infrastructure. A security vulnerability exists in the IBM Application...

PT-2021-2374

Name of the Vulnerable Software and Affected Versions IBM Application Performance Management APM version 8.1.4 Description The issue is related to a lack of protection for service data, which can allow an attacker to disclose protected information. Specifically, the IBM Application Performance...

PT-2021-14569

Name of the Vulnerable Software and Affected Versions Dell EMC PowerProtect Cyber Recovery version 19.7.0.1 Description The issue allows a locally authenticated high privileged Cyber Recovery user to potentially exploit it, leading to the takeover of the notification email account. This is due to...

CVE-2021-21512: Exposure of Sensitive Information to an Unauthorized Actor

Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulnerability leading to the takeover of the notification email account...

CVE-2021-0212 Contrail Networking: Administrator credentials are exposed in a plaintext file

An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...

CVE-2021-0212: Exposure of Sensitive Information to an Unauthorized Actor

An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...

CVE-2020-29502

Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X & T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able ...

CVE-2020-29500

Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to u...

Default credentials

Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X & T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able ...

Default credentials

Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to u...

Default credentials

Dell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage Vulnerability in PowerStore X & T environments. A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able ...