6787 matches found
K20850144: BIG-IP and BIG-IQ DB variable vulnerability CVE-2023-41964
Security Advisory Description The BIG-IP and BIG-IQ systems do not encrypt the values of two Database DB variables, a password used for a proxy server connection and a RADIUS/TACACS+ shared secret. CVE-2023-41964 Impact An authenticated attacker may be able to gain access to privileged informatio...
Acronis Cyber Protect Data Protection Unencrypted Storage
The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the protected information...
Acronis Cyber Protect Data Encryption
The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information...
CVE-2023-5100
Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted...
SICK APU Security Vulnerability
SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400, which originates from the plaintext transmission of sensitive information, allowing a remote attacker to retrieve sensitive information by intercepting unencrypted network traffic...
PT-2023-31722 · Sick · Sick Apu
Name of the Vulnerable Software and Affected Versions: SICK APU affected versions not specified Description: The issue allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted. This is due to the cleartext...
Ruijie Reyee Mesh Router - MITM Remote Code Execution Exploit
Exploit Title: Ruijie Reyee Wireless Router firmware version B11P204 - MITM Remote Code Execution RCE Date: April 15, 2023 Exploit Author: Mochammad Riyan Firmansyah of SecLab Indonesia Vendor Homepage: https://ruijienetworks.com Software Link:...
Ruijie Reyee Mesh Router - MITM Remote Code Execution (RCE)
Exploit Title: Ruijie Reyee Wireless Router firmware version B11P204 - MITM Remote Code Execution RCE Date: April 15, 2023 Exploit Author: Mochammad Riyan Firmansyah of SecLab Indonesia Vendor Homepage: https://ruijienetworks.com Software Link:...
GHSA-2894-QCQF-G23G asyncua Improper Authentication vulnerability
Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. Note: This issue is a result of missing checks for services that require an active session...
PYSEC-2023-189
Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. Note: This issue is a result of missing checks for services that require an active session...
SysPasswordDxe Component Information Disclosure
The vulnerability of the SysPasswordDxe component in the InsydeH2O UEFI firmware creation framework is related to the unencrypted storage of credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to confidential information...
Information Exposure
github.com/schollz/croc is vulnerable to Information Exposure. The vulnerability is due to there case where an explicit IP isn't provided, the receiver prompts the sender for its local IP addresses using the ips? message. That triggers an unencrypted message exchange and sender will send out...
CVE-2023-41305
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2023-41305
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality...
MODULYS GP MOD3GP-SY-120K Unauthorized Access
The vulnerability of the MODULYS GP MOD3GP-SY-120K web-based management application relates to the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2023-43633: Insufficiently Protected Credentials
On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the file exists, it overrides the existing configuration on the device on boot. This allows an attacker to change the system’s configuration, which also includes some debug functions...
Siemens LOGO! 8 BM Plaintext Storage of a Password (CVE-2019-10921)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...
PT-2023-7788 · Nagios Xi · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the Inbound/Outbound Transfer function of the Nagios XI monitoring tool. It involves the unencrypted storage of critical information in the xi options database...
QMS Automotive Information Disclosure
The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to obtain user credentials...
FortiTester Unencrypted Storage
The vulnerability of the FortiTester software for diagnosing and auditing computer networks lies in the unencrypted storage of confidential information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected information...