109 matches found
ZOLL Defibrillator Dashboard Stores Passwords in Recoverable Format Vulnerability
ZOLL Defibrillator Dashboard is a defibrillator management tool. A vulnerability exists in ZOLL Defibrillator Dashboard prior to version 2.2 where passwords are stored in a recoverable format. An attacker could exploit this vulnerability to retrieve credentials from a web browser...
ZOLL Defibrillator Dashboard 安全漏洞
ZOLL Defibrillator Dashboard is a defibrillator management tool. A vulnerability exists in ZOLL Defibrillator Dashboard prior to version 2.2 where passwords are stored in a recoverable format. An attacker could exploit this vulnerability to retrieve credentials from a web browser...
CVE-2021-28492
Unisys Stealth core 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format...
CVE-2021-28492
Unisys Stealth core 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format...
CVE-2021-28492
Unisys Stealth core 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format...
CVE-2021-3141
In Unisys Stealth core before 6.0.025.0, the Keycloak password is stored in a recoverable format that might be accessible by a local attacker, who could gain access to the Management Server and change the Stealth configuration...
Design/Logic Flaw
In Unisys Stealth core before 6.0.025.0, the Keycloak password is stored in a recoverable format that might be accessible by a local attacker, who could gain access to the Management Server and change the Stealth configuration...
CVE-2021-3141
In Unisys Stealth core before 6.0.025.0, the Keycloak password is stored in a recoverable format that might be accessible by a local attacker, who could gain access to the Management Server and change the Stealth configuration...
Format string
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured...
CVE-2020-8296
Summary of CVE-2020-8296 (Nextcloud Server) : Multiple sources describe Nextcloud Server versions prior to 20.0.0 as storing passwords in a recoverable format even when external storage is not configured. The issue is associated with Nextcloud Server
CVE-2020-8296
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured...
CVE-2021-0220
The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser for example via XSS or access cached contents may be able to obtain a copy of...
CVE-2021-0220 Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI
The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser for example via XSS or access cached contents may be able to obtain a copy of...
Format string
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins...
CVE-2020-25235
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins...
External storage app saves password for all users in the database (NC-SA-2021-006)
A missing condition in Nextcloud Server 19 and prior caused the external storage app to always store the users password in a recoverable format...
CVE-2020-24620
Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...
Format string
Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...
CVE-2020-24620
Unisys Stealthcore before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials...
CVE-2020-24620
Unisys Stealth(core) before version 4.0.134 stores passwords in a recoverable format, enabling credential exposure via an Enterprise Manager search. Affected component: Unisys Stealth(core); Root cause: insecure, recoverable password storage. Impact stated: credentials may be revealed. Public det...