PT-2024-16676

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A vulnerability was found in Keycloak where the environment option KC CACHE EMBEDDED MTLS ENABLED does not work, and the JGroups replication configuration is always used in plain text. This...

CVE-2024-54349

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mashiurz Plain Post plain-post allows Stored XSS.This issue affects Plain Post: from n/a through = 1.0.3...

CVE-2024-54349

CVE-2024-54349 is a Stored XSS in the Plain Post WordPress plugin. Affected: Plain Post versions up to 1.0.3. Root cause: improper input neutralization during web page generation. Impact: stored cross-site scripting could affect site visitors. Remediation: update to Plain Post 1.0.3 or later (pat...

CVE-2024-54349 WordPress Plain Post plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mashiurz Plain Post plain-post allows Stored XSS.This issue affects Plain Post: from n/a through = 1.0.3...

CVE-2024-54349 WordPress Plain Post plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mashiurz.com Plain Post allows Stored XSS.This issue affects Plain Post: from n/a through 1.0.3...

CVE-2024-54349: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mashiurz Plain Post plain-post allows Stored XSS.This issue affects Plain Post: from n/a through = 1.0.3...

PT-2024-36234 · Unknown · Plain Post

Name of the Vulnerable Software and Affected Versions: Plain Post versions 1.0.3 and earlier Description: The issue is related to Cross-site Scripting XSS and is identified as a Stored XSS vulnerability. This vulnerability allows for improper neutralization of input during web page generation. Th...

WordPress plugin Plain Post 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress Plain Post plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Plain Post versions = 1.0.3...

CVE-2024-53292

Dell VxVerify (versions before x.40.405) contains a Plain-text Password Storage Vulnerability in the shell wrapper. A local high-privilege attacker could disclose user credentials and reuse them to access the vulnerable component with the compromised account’s privileges. Affected product/version...

PT-2024-35716 · Dell · Dell Vxverify

Name of the Vulnerable Software and Affected Versions: Dell VxVerify versions prior to x.40.405 Description: The issue concerns a Plain-text Password Storage Vulnerability in the shell wrapper of Dell VxVerify. A local high privileged attacker could potentially exploit this vulnerability, leading...

TP-LINK WR845N 安全漏洞

The TP-LINK WR845N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK WR845N version V4200909 and version V4190219, which originates from transmitting user credentials in plain text after performing a restore of factory settings...

IBM Workload Scheduler Information Disclosure Vulnerability

IBM Workload Scheduler is a suite of enterprise task scheduling software from International Business Machines IBM. The software automates the control of workloads. An information disclosure vulnerability exists in IBM Workload Scheduler versions 9.5, 10.1, and 10.2, which stems from storing user...

ABB ASPECT 安全漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. ABB ASPECT has a security vulnerability that originates from a web browser interface that may be able to manipulate application usernames/passwords in plaintext or Base64 encoding...

Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001355 fixes several issues. The following security issues were fixed: CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool bsc1225429. CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. CVE-2024-43861: Fix memor...

SUSE CVE-2024-36464

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

CVE-2024-36464

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

Zabbix 安全漏洞

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in Zabbix that stems from the fact that when exporting media types, passwords will be exported in plain...

CVE-2024-49351

IBM Workload Scheduler 9.5, 10.1, and 10.2 stores user credentials in plain text which can be read by a local user...

CVE-2024-49351

IBM Workload Scheduler (versions 9.5, 10.1, 10.2) stores user credentials in plaintext, readable by a local user. This yields a CVSSv3.1 base score of 5.5 (LO: Local, PR:L, C:H, I:N, A:N). The issue stems from plaintext password storage; remediation is to upgrade to fixed releases: 9.5.0.7, 10.1....