Lucene search
+L

6855 matches found

zdt
zdt
•added 2019/06/05 12:00 a.m.•162 views

Logitech R700 Laser Presentation Remote Keystroke Injection Vulnerability

Product: R700 Laser Presentation Remote Manufacturer: Logitech Affected Versions: Model R-R0010 PID WD904XM and PID WD802XM Tested Versions: Model R-R0010 PID WD904XM and PID WD802XM Vulnerability Type: Insufficient Verification of Data Authenticity CWE-345 Keystroke Injection Vulnerability Risk...

8.8CVSS0.6AI score0.01347EPSS
SaveExploits2
AlpineLinux
AlpineLinux
•added 2019/05/31 3:29 p.m.•68 views

CVE-2019-10329

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.8CVSS3.4AI score0.01731EPSS
SaveExploits0
NVD
NVD
•added 2019/05/31 3:29 p.m.•31 views

CVE-2019-10329

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.8CVSS8.6AI score0.01731EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/05/31 2:20 p.m.•45 views

CVE-2019-10329

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.7AI score0.01731EPSS
SaveExploits0References3
Mend
Mend
•added 2019/05/31 2:20 p.m.•11 views

CVE-2019-10329

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.8CVSS0.01731EPSS
SaveExploits0References6
CVE
CVE
•added 2019/05/31 2:20 p.m.•245 views

CVE-2019-10329

CVE-2019-10329 affects the Jenkins InfluxDB Plugin (versions 1.21 and earlier). The root cause is unencrypted credentials stored in the plugin’s global configuration file on the Jenkins master, allowing users with access to the master filesystem to view them. Impact is credential disclosure. Reme...

8.8CVSS8.6AI score0.01731EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2019/05/31 12:00 a.m.•25 views

PT-2019-11729 · Jenkins · Jenkins Influxdb Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins InfluxDB Plugin versions 1.21 and earlier Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master. This allows users with access to the master file...

8.8CVSS8.5AI score0.01731EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/31 12:00 a.m.•8 views

CVE-2019-10329: Insufficiently Protected Credentials

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.8CVSS5.8AI score0.01731EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2019/05/31 12:00 a.m.•26 views

influxdb stored credentials in plain text

influxdb stored target passwords unencrypted in its global configuration file on the Jenkins controller. These credentials could be viewed by users with access to the Jenkins controller file system. influxdb now stores its passwords encrypted...

8.8CVSS7.9AI score0.01731EPSS
SaveExploits0Affected Software1
osv_cve
osv_cve
•added 2019/05/14 8:29 p.m.•25 views

CVE-2019-10921

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...

7.5CVSS5.7AI score0.02447EPSS
SaveExploits3References5
NVD
NVD
•added 2019/05/14 8:29 p.m.•38 views

CVE-2019-10921

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...

7.5CVSS7.6AI score0.02447EPSS
SaveExploits3References5
Prion
Prion
•added 2019/05/14 8:29 p.m.•23 views

Security feature bypass

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...

5CVSS7.5AI score0.02447EPSS
SaveExploits3References5Affected Software1
Cvelist
Cvelist
•added 2019/05/14 7:54 p.m.•36 views

CVE-2019-10921

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...

7.2AI score0.02447EPSS
SaveExploits3References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/14 12:00 a.m.•8 views

CVE-2019-10921: Plaintext Storage of a Password

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...

7.5CVSS5.7AI score0.02447EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
•added 2019/05/14 12:00 a.m.•3 views

PT-2019-2288

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM versions prior to V8.3 Description The issue is related to the storage of unencrypted passwords in the project data. An attacker with network access to port 10005/tcp could exploit this to obtain device passwords. No user interactio...

7.5CVSS0.02447EPSS
SaveExploits3References8
osv_cve
osv_cve
•added 2019/04/30 1:29 p.m.•16 views

CVE-2019-10313

Jenkins Twitter Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

8.8CVSS6.7AI score0.01798EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2019/04/30 1:29 p.m.•29 views

CVE-2019-10316

Jenkins Aqua MicroScanner Plugin 1.0.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...

8.8CVSS6.5AI score
SaveExploits0References3
osv_cve
osv_cve
•added 2019/04/30 1:29 p.m.•28 views

CVE-2019-10318

Jenkins Azure AD Plugin 0.3.3 and earlier stored the client secret unencrypted in the global config.xml configuration file on the Jenkins master where it could be viewed by users with access to the master file system...

8.8CVSS6.5AI score
SaveExploits0References3
NVD
NVD
•added 2019/04/30 1:29 p.m.•30 views

CVE-2019-10318

Jenkins Azure AD Plugin 0.3.3 and earlier stored the client secret unencrypted in the global config.xml configuration file on the Jenkins master where it could be viewed by users with access to the master file system...

8.8CVSS8.6AI score0.01798EPSS
SaveExploits0References3
NVD
NVD
•added 2019/04/30 1:29 p.m.•35 views

CVE-2019-10316

Jenkins Aqua MicroScanner Plugin 1.0.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...

8.8CVSS8.6AI score0.01798EPSS
SaveExploits0References3
Rows per page
Query Builder