3109 matches found
CVE-2024-37187
Advantech ADAM-5550 share user credentials with a low level of encryption, consisting of base 64 encoding...
CVE-2024-34542
CVE-2024-34542 affects Advantech ADAM-5630. Technical details across sources show that user credentials are transmitted in plain text during login due to weak encoding, exposing confidentiality risk (CVE-2024-34542). Affected product: Advantech ADAM-5630; vulnerable component/function involves th...
CVE-2024-34542 Advantech ADAM-5630 Weak Encoding for Password
Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process...
CVE-2024-37187
CVE-2024-37187 affects Advantech ADAM-5550. Vulnerability: weak encoding for passwords via base64, exposing credentials. Affected: ADAM-5550 (all versions). Impact: potential credential disclosure; confidentiality at high risk. Mitigation: upgrade to ADAM-5630 firmware v2.5.2+ per ICS advisory. N...
Information Disclosure
org.apache.maven.plugins,maven-archetype-plugin is vulnerable to Information Disclosure. The vulnerability is due to the integration testing process, which creates the archetype-settings.xml file containing sensitive information from the user's /.m2/settings.xml, allowing an attacker to access...
CVE-2023-46175
IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user...
CVE-2023-46175 IBM Cloud Pak for Multicloud Management information disclosure
IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user...
CVE-2023-46175
CVE-2023-46175 affects IBM Cloud Pak for Multicloud Management (CP4MCM) versions 2.3 through 2.3 FP8. The issue is that credentials are stored in a log file in plain text, which could be read by a privileged user, exposing sensitive data. The available public remediation is to upgrade to version ...
CVE-2023-46175 IBM Cloud Pak for Multicloud Management information disclosure
IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user...
Cisco Catalyst Center Static SSH Host Key (cisco-sa-dnac-ssh-e4uOdASj)
The version of Cisco Catalyst Center formerly Cisco DNA Center installed on the remote host is prior to 2.3.5.6, 2.3.6.x, or 2.3.7.x prior to 2.3.7.5. It is, therefore, affected by a vulnerability in the SSH server that could allow an unauthenticated, remote attacker to impersonate a Cisco Cataly...
CVE-2024-20350
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability...
CVE-2024-20350 Cisco Catalyst Center Static SSH Host Key Vulnerability
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability...
CVE-2024-20350 Cisco Catalyst Center Static SSH Host Key Vulnerability
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability...
PT-2024-6555 · Watchguard · Watchguard Authentication Gateway
Name of the Vulnerable Software and Affected Versions: WatchGuard Authentication Gateway versions through 12.10.2 Description: The issue is related to an Incorrect Authorization vulnerability in the WatchGuard Authentication Gateway, allowing an attacker with network access to execute restricted...
Exploit for Path Traversal in Tuzitio Camaleon_Cms
CVE-2024-46986 Camaleon CMS Exploit - Arbitrary File Upload...
The vulnerability of the Yealink Meeting Server lies in the insufficient protection of operational data, which allows attackers to gain access to user credentials.
The vulnerability of the Yealink Meeting Server video conference service is related to insufficient protection for sensitive data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to user credentials...
CVE-2024-45596 Directus's session is cached for OpenID and OAuth2 if `redirect` is not used
Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated user via OpenID or OAuth2 where the authentication URL did not include redirect query string. This happens because on that endpoint for both OpenId...
CVE-2024-44815
Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...
CVE-2024-35282
A cleartext storage of sensitive information in memory vulnerability CWE-316 affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain...