CVE-2022-20651

A vulnerability in the logging component of Cisco Adaptive Security Device Manager ASDM could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited...

Cisco Adaptive Security Device Manager Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco Adaptive Security Device Manager ASDM could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited...

Jenkins Publish Over SSH Plugin security vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Cisco Adaptive Security Device Manager log information leakage vulnerability

Cisco Adaptive Security Device Manager is a security device manager from Cisco. Cisco Adaptive Security Device Manager suffers from a log information disclosure vulnerability that stems from the logging component storing unencrypted credentials in certain logs. An attacker could exploit this...

CVE-2022-20621: Insufficiently Protected Credentials

Jenkins Metrics Plugin 4.0.2.8 and earlier stores an access key unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

PT-2022-1416

Name of the Vulnerable Software and Affected Versions Cisco IP Phone affected versions not specified Description A vulnerability in the information storage architecture of several Cisco IP Phone models could allow an unauthenticated, physical attacker to obtain confidential information from an...

PT-2022-1420 · Cisco · Cisco Adaptive Security Device Manager

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Device Manager ASDM affected versions not specified Description: The issue is related to insufficient protection of registration data in the logging component of Cisco Adaptive Security Device Manager ASDM. This could...

PT-2022-14830 · Jenkins · Jenkins Metrics Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Metrics Plugin versions 4.0.2.8 and earlier Description: The issue allows an access key to be stored unencrypted in the global configuration file on the Jenkins controller. This access key can be viewed by users with access to the...

PT-2022-15847 · Jenkins · Jenkins Active Directory Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Active Directory Plugin versions 2.25 and earlier Description: The issue concerns the transmission of data between the Jenkins controller and Active Directory servers, which is not encrypted in most configurations. Recommendations: Fo...

PT-2022-15857 · Jenkins · Jenkins Publish Over Ssh Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Publish Over SSH Plugin versions 1.22 and earlier Description: The issue allows passwords to be stored unencrypted in the global configuration file on the Jenkins controller. This can be viewed by users with access to the Jenkins...

Jenkins security vulnerabilities

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . An information disclosure vulnerability exists in Jenkins Active Directory Plugin version 2.25 and earlier, which stems...

CVE-2022-23114: Insufficiently Protected Credentials

Jenkins Publish Over SSH Plugin 1.22 and earlier stores password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

Cisco IP Phone security vulnerabilities

Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phones that provide calling capabilities. A security vulnerability exists in the Cisco IP Phones that results from unencrypted storage of confidential information on the affected devices. An attacker could exploit this...

Netgear Nighthawk R6700 has a vulnerability related to information leakage

An information disclosure vulnerability exists in the Netgear Nighthawk R6700, a wireless router from Netgear, which stems from the product's failure to encrypt HTTP requests. An attacker could gain access to sensitive information through this vulnerability...

PT-2021-7482

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3150A-LTE versions affected versions not specified Moxa OnCell G3470A-LTE versions affected versions not specified Moxa WDR-3124A versions affected versions not specified Moxa AWK-3131A versions affected versions not specified Mox...

PT-2021-7466

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3150A-LTE versions affected versions not specified Moxa OnCell G3470A-LTE versions affected versions not specified Moxa WDR-3124A versions affected versions not specified Moxa AWK-3131A versions affected versions not specified Mox...

WISE-4060 Ethernet module Unencrypted Storage

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker to gain full access to the device’s configuration files...

postgresql: server processes unencrypted bytes from man-in-the-middle

It was found that a PostgreSQL server could accept plain text data during the establishment of an SSL connection. When a user is requesting a certificate based authentication, an active Person in the Middle could use this flaw in order to inject arbitrary SQL commands...

ALSA-2021:5236 Moderate: postgresql:13 security update

PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream version: postgresql 13.5. Security Fixes: postgresql: memory disclosure in certain queries CVE-2021-3677 postgresql: server processes unencrypted bytes from...

RLSA-2021:5236 Moderate: postgresql:13 security update

PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream version: postgresql 13.5. Security Fixes: postgresql: memory disclosure in certain queries CVE-2021-3677 postgresql: server processes unencrypted bytes from...