CVE-2019-14886

A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in erraisecuritycontext. The encoding used for storing the passwords is Base64, not an encryption algorithm, and any recovery of these passwords could lead to user passwords...

CVE-2019-14886: Cleartext Storage of Sensitive Information

A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in erraisecuritycontext. The encoding used for storing the passwords is Base64, not an encryption algorithm, and any recovery of these passwords could lead to user passwords...

CVE-2020-9476

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding...

Design/Logic Flaw

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding...

CVE-2020-9476

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding...

CVE-2020-9476

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding...

CVE-2020-9476: Inadequate Encryption Strength

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding...

CVE-2020-9337

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

Cross site request forgery (csrf)

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

CVE-2020-9337

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

CVE-2020-9337

CVE-2020-9337 affects GolfBuddy Course Manager 1.1, where passwords are transmitted via a GET request using base64 encoding. This exposes confidential data because base64 is not encryption and GET parameters can be logged or exposed in browser history and server logs. NVD CVSS3.1 vector CVSS:3.1/...

CVE-2020-9337: Exposure of Sensitive Information to an Unauthorized Actor

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

PT-2020-20592

Name of the Vulnerable Software and Affected Versions GolfBuddy Course Manager version 1.1 Description The issue involves sending passwords via a GET request with base64 encoding. This is a security concern as sensitive information like passwords should not be transmitted in such a manner due to...

es-art.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1103403 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Huawei EulerOS: Security Advisory for cockpit (EulerOS-SA-2020-1143)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ladigoinaise.ikinoa.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3587 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting ladigoinaise.ikinoa.com website and its users. Following...

carpets99.link Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1097998 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

preciosde.es Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1092709 Security Researcher Broly157 Helped patch 1644 vulnerabilities Received 7 Coordinated Disclosure badges Received 16 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting preciosde.es website and...

Exploit for Unrestricted Upload of File with Dangerous Type in Artica Pandora_Fms

CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 A...

baanna.go.th Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1075687 Security Researcher geeknik Helped patch 8729 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting baanna.go.th website and i...