The vulnerability of the microprogramming software for Siemens SICAM processor module control modules allows a intruder to disclose protected information.

The vulnerability of the microprogramming software of Siemens SICAM processor control modules relates to the unencrypted storage of confidential information. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Contacts component in the macOS operating system, which allows a hacker to disclose protected information

The vulnerability of the Contacts component in the macOS operating system is related to the unencrypted storage of user data. Exploiting this vulnerability could allow an attacker to disclose the protected information...

The vulnerability of the software for creating local copies of deleted container registry entries, known as the Mirror registry for Red Hat OpenShift, arises from the unencrypted storage of critical information. This vulnerability allows for the creation of session cookie files and unauthorized access to the affected instance of Quay.

The vulnerability of the Mirror registry software for Red Hat OpenShift, which is used to create local copies of deleted container images, is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to create session cookie files and gain...

The vulnerability of the software for creating local copies of deleted container registries, such as the Mirror registry for Red Hat OpenShift, arises from the unencrypted storage of critical information. This allows an intruder to gain unauthorized access to protected data.

The vulnerability of the Mirror registry software for Red Hat OpenShift, which is used to create local copies of deleted container images, is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...

PT-2024-3750 · Unknown · Opupi0 Amqp/Mqtt

Name of the Vulnerable Software and Affected Versions: OPUPI0 AMQP/MQTT versions prior to V5.30 Description: A vulnerability has been identified that allows an attacker with remote shell access or physical access to retrieve credentials due to insufficient protection of stored MQTT client...

CVE-2024-34147

Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

CVE-2024-34147

Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

The vulnerability of the AutomationDirect C-MORE EA9 HMI software’s microprogramming system, related to unencrypted storage of critical information, allows a intruder to gain unauthorized access to protected data.

The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI relates to the unencrypted storage of critical information. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Android application for controlling TP-Link Tapo C200 IP cameras, which involves unencrypted storage of user credentials, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Android application for controlling TP-Link Tapo C200 IP cameras lies in the unencrypted storage of user credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the unencrypted storage of critical information, which allows attackers to disclose protected data.

The vulnerability of the XWiki Platform lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose the protected data remotely...

PT-2024-1678

Name of the Vulnerable Software and Affected Versions TP-Link Tapo APK up to v2.12.703 Description The issue is related to the use of hardcoded credentials for access to the login panel in the TP-Link Tapo APK. This allows a remote attacker to gain unauthorized access to protected information. Th...

The vulnerability of the Inbound/Outbound Transfer function in the Nagios XI monitoring tool allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Inbound/Outbound Transfer function in Nagios XI relates to the unencrypted storage of critical information in the xioptions database table. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Tokens stored in plain text by Dingding JSON Pusher Plugin

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2023-50776

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

PT-2023-31645

Name of the Vulnerable Software and Affected Versions Jenkins PaaSLane Estimate Plugin versions 1.0.4 and earlier Description The issue concerns the storage of PaaSLane authentication tokens in an unencrypted manner within job config.xml files on the Jenkins controller. This allows users with...

The vulnerability of the Nautobot network infrastructure management software lies in the unencrypted storage of credentials, allowing attackers to influence the confidentiality of this information.

The vulnerability of the Nautobot network infrastructure management software is related to the unencrypted storage of credentials. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of information...

The vulnerability of the KeePass password manager, related to the unencrypted storage of critical information, allows attackers to obtain passwords in an open form.

The vulnerability of the KeePass password manager is related to the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker to obtain passwords in their raw form...

The vulnerability of the SCADA system PcVue, related to unencrypted storage of account data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system PcVue is related to the unencrypted storage of account data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Huawei HarmonyOS and EMUI Information Disclosure Vulnerability (CNVD-2023-88962)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI have an information disclosu...

Huawei HarmonyOS 信息泄露漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI have an information disclosu...