CVE-2025-0071

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

CVE-2025-0071

SAP Web Dispatcher and SAP Internet Communication Manager contain a vulnerability where an attacker with administrative privileges can enable debugging trace mode via a specific parameter, leading to unencrypted passwords being written to logs. This affects confidentiality (C) with high impact, w...

CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

CVE-2025-22493

Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software FRS. Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100...

CVE-2025-22493

Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software FRS. Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100...

CVE-2025-22493 Improper cookie attributes in Foreseer Reporting Software (FRS)

Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software FRS. Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100...

Linux Distros Unpatched Vulnerability : CVE-2020-25645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt...

GO-2025-3462 Unencrypted transmission in Temporal api-go library in go.temporal.io/api

Unencrypted transmission in Temporal api-go library in go.temporal.io/api...

Cleartext Transmission of Sensitive Information

Overview skypilot is a SkyPilot: Run AI on Any Infra — Unified, Faster, Cheaper. Affected versions of this package are vulnerable to Cleartext Transmission of Sensitive Information by transmitting traffic over plain HTTP sensitive API requests are exposed to interception and man-in-the-middle...

ASB-A-345258562

In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

Dario Health 安全漏洞

Dario Health is a software from Dario Health that provides digital health solutions for patients with chronic conditions. Dario Health has a security vulnerability that stems from a lack of encryption during cloud infrastructure transfers, which could lead to the manipulation or disclosure of...

The vulnerability of the CalInvocationHandler component in the software for managing SAN networks by Brocade’s SANnav allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CalInvocationHandler component in the software for managing SAN networks by Brocade’s SANnav relates to the unencrypted storage of account data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Siemens A8000 Firmware Insecurities

Siemens A8000 suffers from multiple firmware vulnerabilities. The PLC allows the downgrade to previous firmware versions. Therefore, an attacker is able to downgrade to a firmware version with known vulnerabilities and exploit them on the PLC, which may lead to leaking data or backdoored devices....

CVE-2025-25728

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to send communications to the update API in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack...

The vulnerability of the PAN-OS operating system, related to the unencrypted storage of credentials, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PAN-OS operating system is related to the unencrypted storage of credentials. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the software products of the LLC “NPO ‘MIR’, related to the unencrypted storage of account data, allows a perpetrator to disclose protected information.

The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the unencrypted storage of account data. Exploiting this vulnerability could allow an attacker to disclose the protected information...

The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the fact that confidential information is stored in unencrypted form in memory, allowing an intruder to gain unauthorized access to the protected information.

The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the storage of confidential information in unencrypted form in memory. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the protected information...

Siemens SIMATIC and SCALANCE Devices Improper Restriction of Communication Channel to Intended Endpoints (CVE-2022-2663)

An issue was found in the Linux kernel in nfconntrackirc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nfconntrackirc configured. This plugin only works with Tenable.ot. Please visit...

The vulnerability of the mySCADA myPRO Manager platform, related to the unencrypted storage of critical information, allows a intruder to gain unauthorized access to protected data.

The vulnerability of the mySCADA myPRO Manager platform is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...