CVE-2020-21994

AVE DOMINAplus =1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful...

CVE-2020-21994

CVE-2020-21994 affects AVE DOMINAplus <= 1.10.x. The issue is a clear-text credentials disclosure where an unauthenticated attacker can access an unprotected directory hosting /xml/authClients.xml and obtain administrative login information, enabling a authentication bypass. Reported as high-s...

CVE-2020-21994: Insufficiently Protected Credentials

AVE DOMINAplus =1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful...

Samsung Email Information Disclosure Vulnerability (CNVD-2021-30495)

Samsung Email application is a cell phone application from Samsung South Korea. It provides the function of sending and receiving e-mail. A security vulnerability exists in Samsung Email versions prior to 6.1.41.0, which originates from leaking messages in certain mailboxes in clear text. No...

Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerabilities (USN-4894-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4894-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a maliciou...

Security Bulletin: IBM Resilient – Password in Clear Text (CVE-2016-6064)

Summary Security Bulletin: IBM Resilient – Password in Clear Text CVE-2016-6064 Vulnerability Details Title Security Bulletin: IBM Resilient – Password in Clear Text CVE-2016-6064 Summary The software stores user or system passwords unencrypted which can allow attackers with file system access or...

CVE-2021-23884 Clear text exposure of password in McAfee CSR ePO extension

Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter CSR prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway MWG or the password of the McAfee Web Gateway Cloud Server MWGCS read on...

CVE-2021-0432

In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Design/Logic Flaw

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

CVE-2021-24024

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

CVE-2021-24024

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

Samsung Email information leakage vulnerability

Samsung Email application is a cell phone application from Samsung South Korea. It provides the function of sending and receiving e-mail. A security vulnerability exists in Samsung Email versions prior to 6.1.41.0, which originates from leaking messages in certain mailboxes in clear text. No...

OESA-2021-1100 ceph security update

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage. Security Fixes: A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by...

Fortinet FortiADC log information leakage vulnerability

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A security vulnerability exists in FortiADCManager that originates from the insertion of a user's password into a log file in clear text. An attacker could exploit this vulnerability to obtain sensitive information...

PT-2021-7475

Name of the Vulnerable Software and Affected Versions FortiADCManager versions 5.3.0 and below FortiADCManager version 5.2.1 and below FortiADC versions 5.3.7 and below Description The issue is related to the storage of sensitive information in clear text in log files. This may allow a remote...

FortiADCManager - plain text password in a log file when an admin user create a new user

A clear text storage of sensitive information into log file vulnerability in FortiADCManager and FortiADC may allow a remote authenticated attacker to read other local users' password in log files...

OSV-2021-593 Heap-use-after-free in std::__1::vector<char, std::__1::allocator<char> >::size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32822 Crash type: Heap-use-after-free READ 8 Crash state: std::1::vector ::size std::1::vector ::resize Assimp::TXmlParser::clear...

PT-2021-28187

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A heap-use-after-free READ 8 crash occurs in the Assimp library. The issue is related to the std:: 1::vector class, specifically the size and resize functions. The Assimp::TXmlParser::clear...

CVE-2020-29623

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete...

DEBIAN-CVE-2020-29623

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete...