Lucene search
+L

6781 matches found

CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•14 views

IBM Cognos Analytics Mobile 安全漏洞

IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. Integrates reporting, modeling, analytics, dashboards, cases, and event management. A security vulnerability exists in IBM Cognos Analytics Mobile versions 1.1.0 through 1.1.22, which stems from the use o...

7.5CVSS6.3AI score0.00245EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/21 12:00 a.m.•14 views

PT-2025-30323 · Ibm · Ibm Cognos Analytics Mobile

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics Mobile iOS versions 1.1.0 through 1.1.22 Description: IBM Cognos Analytics Mobile iOS may expose information due to the use of unencrypted network traffic. Recommendations: IBM Cognos Analytics Mobile iOS versions prior t...

7.5CVSS6.1AI score0.00245EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/07/18 11:54 a.m.•12 views

CVE-2025-53755

This vulnerability exists in Digisol DG-GR6821AC Router due to storage of credentials and PINS without encryption in the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the unencrypted dat...

5.1CVSS6.3AI score0.001EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/18 12:00 a.m.•31 views

CVE-2025-32353

Kaseya Rapid Fire Tools Network Detective 2.0.16.0 has Unencrypted Credentials for privileged access stored in the collector.txt configuration file...

4.8CVSS9.3AI score0.00128EPSS
SaveExploits0References1
OSV
OSV
•added 2025/07/17 10:15 p.m.•25 views

CVE-2025-6391

Brocade ASCG before 3.3.0 logs JSON Web Tokens JWT in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized access, session hijacking, and information disclosure...

9.8CVSS6.2AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/17 10:15 p.m.•51 views

CVE-2025-6391

Brocade ASCG before 3.3.0 logs JSON Web Tokens JWT in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized access, session hijacking, and information disclosure...

9.1CVSS0.00249EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/17 12:00 a.m.•21 views

Brocade ASCG 日志信息泄露漏洞

Brocade ASCG is a networking feature from Brocade USA that is primarily used to simplify SAN architecture and optimize resource utilization. A log information disclosure vulnerability exists in Brocade ASCG versions prior to 3.3.0, which originates from logging unencrypted JWT tokens in log files...

9.1CVSS6AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/16 3:15 p.m.•17 views

CVE-2025-32353

Kaseya Rapid Fire Tools Network Detective 2.0.16.0 has Unencrypted Credentials for privileged access stored in the collector.txt configuration file...

8.2CVSS0.00128EPSS
SaveExploits0References4
NVD
NVD
•added 2025/07/16 12:15 p.m.•18 views

CVE-2025-53755

This vulnerability exists in Digisol DG-GR6821AC Router due to storage of credentials and PINS without encryption in the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the unencrypted dat...

5.1CVSS0.001EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/16 12:00 a.m.•42 views

CVE-2025-32353

Kaseya Rapid Fire Tools Network Detective version 2.0.16.0 is vulnerable to the cleartext storage of sensitive information (CWE-301). The software stores unencrypted credentials for privileged access within the collector.txt configuration file. This exposure could allow an attacker with local acc...

8.2CVSS9.3AI score0.00128EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/07/16 12:00 a.m.•23 views

CVE-2025-32353

Kaseya Rapid Fire Tools Network Detective 2.0.16.0 has Unencrypted Credentials for privileged access stored in the collector.txt configuration file...

0.00128EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/07/16 12:00 a.m.•10 views

CVE-2025-32353

Kaseya Rapid Fire Tools Network Detective 2.0.16.0 has Unencrypted Credentials for privileged access stored in the collector.txt configuration file...

6.8AI score0.00128EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/07/16 12:00 a.m.•15 views

Kaseya RapidFire Tools Network Detective 安全漏洞

Kaseya RapidFire Tools Network Detective is a network asset assessment and security scanning tool from Kaseya Corporation, USA. A security vulnerability exists in Kaseya RapidFire Tools Network Detective version 2.0.16.0, which originates from storing unencrypted credentials in configuration file...

8.2CVSS9.3AI score0.00128EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/07/16 12:00 a.m.•13 views

PT-2025-29773 · Digisol · Digisol Dg-Gr6821Ac Router

Name of the Vulnerable Software and Affected Versions: Digisol DG-GR6821AC Router affected versions not specified Description: The Digisol DG-GR6821AC Router stores credentials and PINS without encryption in the device firmware. An attacker with physical access could extract the firmware and...

5.1CVSS6.2AI score0.001EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/07/16 12:00 a.m.•20 views

The vulnerability of the Nouvola DiveCloud plugin for Jenkins’ automation server, related to the storage of keys in an unencrypted form, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Nouvola DiveCloud plugin for Jenkins-based automation servers lies in the storage of keys in an unencrypted form within the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...

6.8CVSS5.4AI score0.00212EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/16 12:00 a.m.•20 views

The vulnerability of the Nouvola DiveCloud plugin for Jenkins’ automation server, related to the storage of keys in an unencrypted form, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Nouvola DiveCloud plugin in the Jenkins automation server lies in the fact that keys are stored in an unencrypted form in the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...

6.8CVSS5.5AI score0.00157EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/16 12:00 a.m.•18 views

The vulnerability of the Kryptowire Jenkins automation server’s plugin, related to the storage of keys in an unencrypted form, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Kryptowire Jenkins automation server plugin relates to the storage of keys in an unencrypted form in the file org.aerogear.kryptowire.GlobalConfigurationImpl.xml. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

6.8CVSS5.4AI score0.00313EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/16 12:00 a.m.•23 views

The vulnerability of the Sensedia API Platform Tools for Jenkins servers, related to the storage of tokens in unencrypted form, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Sensedia Api Platform tools for Jenkins servers relates to the storage of tokens in an unencrypted form within the file com.sensedia.configuration.SensediaApiConfiguration.xml. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...

5.3CVSS5.4AI score0.00301EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/16 12:00 a.m.•18 views

The vulnerability of the Dead Man’s Snitch plugin in Jenkins servers, related to the storage of tokens in unencrypted form, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Dead Man’s Snitch plugin in the Jenkins automation server lies in the fact that tokens are stored in an unencrypted form in the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...

6.8CVSS5.5AI score0.00245EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/16 12:00 a.m.•27 views

The vulnerability of the Sensedia API Platform Tools for Jenkins servers, related to the storage of tokens in unencrypted form, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Sensedia Api Platform tools for Jenkins servers relates to the storage of tokens in an unencrypted form within the file com.sensedia.configuration.SensediaApiConfiguration.xml. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...

6.8CVSS5.4AI score0.00236EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder