Devolutions Server 安全漏洞

Devolutions Server is an application system developed by the Canadian company Devolutions. It provides a fully functional solution for shared accounts and password management. Versions of Devolutions Server prior to 2025.3.14 contained a security vulnerability; this vulnerability stemmed from the...

The vulnerability in the web interface for managing Tenda W30E micro-program software routers allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the web-based management interface for Tenda W30E micro-programmed router software is related to the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read data...

CVE-2025-59105 Unencrypted Flash Storage in dormakaba access manager

With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, stored PINs and so on can be modified and...

CVE-2022-38665

Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

The vulnerability of the microprogrammed software for POWER METER SICAM Q100 and POWER METER SICAM Q200 lies in the unencrypted storage of critical information, which allows an intruder to gain unauthorized access to the protected data.

The vulnerability of the microprogrammed power meter measuring devices POWER METER SICAM Q100 and POWER METER SICAM Q200 is related to the unencrypted storage of critical information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected information...

The vulnerability of the microprogrammed software for POWER METER SICAM Q100 and POWER METER SICAM Q200 lies in the unencrypted storage of critical information, which allows an intruder to gain unauthorized access to the protected data.

The vulnerability of the microprogrammed power meter measuring devices POWER METER SICAM Q100 and POWER METER SICAM Q200 is related to the unencrypted storage of critical information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected information...

CVE-2025-64305 Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk

MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal...

The vulnerability of the IBM QRadar SIEM system’s event collection and analysis process lies in the storage of authentication data in unencrypted form within configuration files. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM QRadar SIEM event collection and analysis system lies in the storage of authentication data in unencrypted form within configuration files. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Sensitive Information Disclosure

Jenkins is vulnerable to Sensitive Information Disclosure. The vulnerability is due to build authorization tokens being stored unencrypted in job configuration files, which allows an attacker with extended read permissions or file system access to view and misuse these credentials...

Insertion Of Sensitive Information

Jenkins Kryptowire Plugin is vulnerable to insertion of sensitive information. The vulnerability is due to storing the Kryptowire API key in an unencrypted global configuration file, which allows an attacker with access to the Jenkins controller file system to retrieve the API key...

CVE-2025-67637

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

PT-2025-50355

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.540 and earlier Jenkins LTS versions 2.528.2 and earlier Description Jenkins stores build authorization tokens unencrypted in config.xml files on the Jenkins controller. This allows users with Item/Extended Read permission, ...

Jenkins 安全漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins 2.540 and earlier and LTS 2.528.2 and earlier, which stems from unencrypted...

EUVD-2025-200253

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

PT-2025-48702

Name of the Vulnerable Software and Affected Versions Entrust nShield Connect XC versions through 13.6.11 Entrust nShield 5c versions through 13.6.11 Entrust nShield HSMi versions through 13.6.11 Entrust nShield Connect XC version 13.7 Entrust nShield 5c version 13.7 Entrust nShield HSMi version...

CVE-2025-59701

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

The vulnerability of software and hardware solutions for configuring, diagnosing, and controlling Emerson ValveLink SOLO, ValveLink DTM, ValveLink PRM, and ValveLink SNAP-ON lies in the unencrypted storage of confidential information, allowing attackers to gain unauthorized access to protected data.

The vulnerability of software and hardware solutions for configuring, diagnosing, and controlling Emerson ValveLink SOLO, ValveLink DTM, ValveLink PRM, and ValveLink SNAP-ON relates to the unencrypted storage of confidential information. Exploiting this vulnerability can allow an attacker operati...

The vulnerability of the Prisma Browser, related to the unencrypted storage of confidential information, allows attackers to gain unauthorized access to protected data.

The vulnerability of the Prisma Browser is related to the unencrypted storage of confidential information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ZenCount visitor counter lies in the unencrypted storage of critical information, allowing attackers to compromise the confidentiality of the protected data.

The vulnerability of the ZenCount visitor counter is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of the protected information...

GHSA-HV42-CRPX-Q355 Jenkins Curseforge Publisher Plugin does not mask API Keys displayed on the job configuration form

Jenkins Curseforge Publisher Plugin 1.0 and earlier stores API Keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. Additionally, the j...