129 matches found
LOYTEC LINX-212 Security Vulnerability
The LOYTEC LINX-212 is a building controller from LOYTEC. A security vulnerability exists in the LOYTEC LINX-212 version 6.2.4 and LINX-151 version 7.2.4, which stems from a vulnerability that allows an attacker to disclose smtp client account credentials and bypass email authentication via the...
Tenable Nessus < 10.5.5 Multiple Vulnerabilities (TNS-2023-31)
According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-31 advisory. - A pass-back vulnerability exists where an authenticated, remote attacker with...
CVE-2023-3251
A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0...
CVE-2023-3251 Pass-back vulnerability in Nessus
A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0...
CVE-2023-3251 Pass-back vulnerability in Nessus
A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0...
PT-2023-23842 · Tenable · Nessus
Name of the Vulnerable Software and Affected Versions: Nessus versions prior to 10.6.0 Description: A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application. Recommendations: For...
Tenable Network Security Nessus 安全漏洞
Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. A security vulnerability exists in versions of Nessus prior to 10.6.0, which stems from a backport vulnerability that allows an authenticated remote attacker with administrator...
CVE-2023-36082
An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials...
CVE-2023-36082
Technical details on CVE-2023-36082 are not publicly available in the provided connected documents. Monitor for updates from vendors and vulnerability databases; current sources reiterate a privilege-escalation via LDAP/SMTP credentials in GatesAir Flexiva.
CVE-2023-34673
Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...
CVE-2023-34673
Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...
Design/Logic Flaw
XWiki Platform is a generic wiki platform. Starting in version 11.8-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.2, Mail.MailConfig can be edited by any logged-in user by default. Consequently, they can change the mail obfuscation configuration and view and edit the mail sending...
CVE-2023-34673
Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...
CVE-2023-34673
The CVE-2023-34673 issue affects the Elenos ETG150 FM transmitter (firmware v3.12). It arises from insufficient protection of a publicly accessible Memcached service, enabling an attacker to leak SMTP credentials and other sensitive information, with potential exposure over the public Internet in...
CVE-2023-34673
Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases...
CVE-2023-27927 CVE-2023-27927
An authenticated malicious user could acquire the simple mail transfer protocol SMTP Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials...
CVE-2022-2370 YaySMTP < 2.2.1 - Subscriber+ SMTP Credentials Leak
The YaySMTP WordPress plugin before 2.2.1 does not have capability check before displaying the Mailer Credentials in JS code for the settings, allowing any authenticated users, such as subscriber to retrieve them...
CVE-2022-27544
BigFix Web Reports authorized users may see SMTP credentials in clear text...