CVE-2023-49113

The Kiuwan Local Analyzer (KLA) Java scanning application contains multiple hard-coded secrets in plain text format within its JAR files. Specifically, the lib.engine/insight/optimyth-insight.jar file contains InsightServicesConfig.properties, which exposes valid GitHub credentials (insight.githu...

PT-2024-27361 · Westermo · L210-F2G Lynx +2

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows plain text credentials and session ID to be captured with a network sniffer. Recommendations: At the moment, there is no information about a newer version that contains a...

Westermo L210-F2G Lynx Security Vulnerability

The Westermo L210-F2G Lynx is an industrial switch from Westermo Sweden. A security vulnerability exists in the Westermo L210-F2G Lynx. An attacker can exploit the vulnerability to obtain plain text credentials and session IDs...

PT-2024-27463 · Unknown +1 · Oqs-Provider +1

Name of the Vulnerable Software and Affected Versions: oqs-provider versions prior to 0.6.1 Description: The issue arises from the way oqs-provider handles lengths decoded with DECODE UINT32 at the start of serialized hybrid keys and signatures. Unchecked length values are later used for memory...

CVE-2024-25052

IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363...

CVE-2024-25052

IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363...

CVE-2024-25052

IBM Jazz Reporting Service 7.0.3 is vulnerable to information disclosure due to storing user credentials in plain text, readable by an administrator. The issue affects the IBM Jazz Reporting Service and, when Jazz Authentication Service is enabled, can expose the JSA Client Secret in clear text. ...

CVE-2024-25052 IBM Jazz Reporting Service information disclosure

IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363...

CVE-2024-25052 IBM Jazz Reporting Service information disclosure

IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363...

Anonshop Security Breach

Anonshop is an online shopping system from Anon shop open source. A security vulnerability exists in Anonshop that stems from allowing credentials to be stored in plain text...

IBM Jazz Reporting Service Security Vulnerability

IBM Jazz Reporting Service JRS is a suite of ready-to-use reporting components from International Business Machines IBM. The product includes features such as report generation, data collection, and lifecycle queries. A security vulnerability exists in IBM Jazz Reporting Service version 7.0.3 tha...

PT-2024-20720 · Ibm · Ibm Jazz Reporting Service

Name of the Vulnerable Software and Affected Versions: IBM Jazz Reporting Service version 7.0.3 Description: The issue concerns the storage of user credentials in plain clear text, which can be accessed by an admin user. Recommendations: For IBM Jazz Reporting Service version 7.0.3, consider...

Unspecified Vulnerability in NETGEAR WNR614

The Netgear WNR614 is an N300 wireless router with external antenna from Netgear USA. The Netgear WNR614 has a security vulnerability that originates from storing credentials in plain text. No details of the vulnerability are provided at this time...

Security Bulletin: IBM Jazz Reporting Service is vulnerable to Information Disclosure (CVE-2024-25052)

Summary If Jazz Authentication Service is enabled, IBM Jazz Reporting System shows the JSA Client Secret in plain text. Vulnerability Details CVEID:CVE-2024-25052 DESCRIPTION: IBM Jazz Reporting Service stores user credentials in plain clear text which can be read by an Admin user. CVSS Base scor...

PT-2024-4581 · Unknown · Sinec Traffic Analyzer

Name of the Vulnerable Software and Affected Versions: SINEC Traffic Analyzer versions prior to V1.2 Description: A vulnerability has been identified in the web server of SINEC Traffic Analyzer, where it is not enforcing HSTS. This could allow an attacker to perform downgrade attacks, exposing...

Netgear WNR614 安全漏洞

The Netgear WNR614 is an N300 wireless router with external antenna from Netgear USA. The Netgear WNR614 has a security vulnerability that originates from storing credentials in plain text. No details of the vulnerability are provided at this time...

GHSA-M96R-7VQM-J95G Typo3 Information Disclosure in User Authentication

It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials...

Typo3 Information Disclosure in User Authentication

It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials...

Information Disclosure

typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to login failures being logged at the "warning" level instead of the "debug" level, which exposes plain text credential information...

keycloak: exposure of sensitive information in Pushed Authorization Requests (PAR) KC_RESTART cookie

A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests PAR. Client-provided parameters were found to be included in plain text in the KCRESTART cookie returned by the authorization server's HTTP response to a requesturi authorization request, possibly leading to an information...