CVE-2023-35017

IBM Security Verify Governance Identity Manager (ISVG) 10.0.2 is affected by CVE-2023-35017, where user credentials can be transmitted in clear text over the network, potentially exposed to attackers via man-in-the-middle. The issue is addressed in IBM’s remediation with fix packs: 10.0.2.0-ISS-I...

IBM Security Verify Governance security vulnerabilities

IBM Security Verify Governance is an intelligent identity access platform from International Business Machines IBM, Inc. provides organizations with a platform to analyze, define and control user access and access risk. IBM Security Verify Governance suffers from a security vulnerability that ste...

CVE-2025-0631

A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using HTTP resulting in credentials being sent in clear text...

CVE-2025-0631 PowerFlex® 755 Credential Exposure Vulnerability

A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using HTTP resulting in credentials being sent in clear text...

CVE-2025-0631

CVE-2025-0631 affects Rockwell Automation PowerFlex 755. The vulnerability is a credential exposure caused by using HTTP, causing credentials to be sent in clear text. CVSS 4.0 base 8.7 (HIGH) with Network attack vector and no user interaction required. Exploitation status is not detailed in the ...

CVE-2025-0631 PowerFlex® 755 Credential Exposure Vulnerability

A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using HTTP resulting in credentials being sent in clear text...

CVE-2025-0432

EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage...

CVE-2025-0432 HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information

EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage...

CVE-2025-0432

EWON Flexy 202 exposes credentials by transmitting them in clear text via the device web page when a user is added or credentials are changed. Root cause: lack of encryption/cleartext transmission. Impact: confidentiality of credentials is HIGH. Several sources corroborate the issue; however, no ...

CVE-2025-0432 HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information

EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage...

PT-2025-3886 · Hms Industrial Networks · Ewon Flexy 202

Name of the Vulnerable Software and Affected Versions: EWON Flexy 202 affected versions not specified Description: The issue concerns the transmission of user credentials in clear text without encryption when a user is added or user credentials are changed via the device's webpage. This affects t...

Rockwell Automation PowerFlex 755 security vulnerability

The Rockwell Automation PowerFlex 755 is an AC inverter from Rockwell Automation. A security vulnerability exists in the Rockwell Automation PowerFlex 755 that originates from sending credentials in clear text...

synacktiv-rules

synacktiv-rules Public repository of Sigma and YARA/YARA-X ru...

Unbreakable Enterprise kernel security update

5.15.0-304.171.4.3 - NFSD: Limit the number of concurrent async COPY operations Chuck Lever Orabug: 37516381 CVE-2024-49974 - NFSD: Async COPY result needs to return a write verifier Chuck Lever Orabug: 37516381 CVE-2024-49974 - security/keys: fix slab-out-of-bounds in keytaskpermission Chen Rido...

GHSA-V34R-VJ4R-38J6 Updatecli exposes Maven credentials in console output

Summary Private maven repository credentials leaked in application logs in case of unsuccessful retrieval operation. Details During the execution of an updatecli pipeline which contains a maven source configured with basic auth credentials, the credentials are being leaked in the application...

CVE-2024-55928

Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption...

CVE-2024-55928

Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption...

CVE-2024-55928 Clear text secrets returned & Remote system secrets in clear text

Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption...

CVE-2024-55928

Summary: CVE-2024-55928 affects Xerox Workplace Suite. Public docs confirm the issue involves secrets exposed in clear text (locally and remotely) due to insecure handling, with the likely impact of unauthorized access to sensitive secrets. Affected product/details: Xerox Workplace Suite (print m...

CVE-2024-55928 Clear text secrets returned & Remote system secrets in clear text

Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption...