CVE-2019-18248

BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure...

CVE-2019-18248

CVE-2019-18248 affects BIOTRONIK CardioMessenger II. The vulnerability involves cleartext transmission of credentials prior to switching to an encrypted channel, enabling an adjacent attacker to disclose the client credentials used to connect to the BIOTRONIK Remote Communication infrastructure. ...

CVE-2020-12040

Sigma Spectrum Infusion System v's6.x model 35700BAX and Baxter Spectrum Infusion System Versions 8.x model 35700BAX2 at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has...

CVE-2020-12040

CVE-2020-12040 affects Sigma Spectrum Infusion System v6.x (model 35700BAX) and Baxter Spectrum Infusion System v8.x (model 35700BAX2); root cause is unauthenticated clear-text transmission of system status and operational data at the application layer, enabling eavesdropping or MiTM if network c...

PT-2020-13007

Name of the Vulnerable Software and Affected Versions Sigma Spectrum Infusion System versions 6.x Baxter Spectrum Infusion System versions 8.x Description The issue concerns the use of an unauthenticated clear-text communication channel at the application layer to send and receive system status a...

PT-2020-9950

Name of the Vulnerable Software and Affected Versions: BIOTRONIK CardioMessenger II affected versions not specified Description: The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client...

PT-2020-22208

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash occurred, involving functions such as LocalizedText clear, Variant clear, and UA clear. No information is available abou...

PT-2020-22130

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 8 crash type. The crash state involves several functions: String clear,...

PT-2020-22486

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a segmentation fault on an unknown address. The crash involves the pvector free elem, vector free elems, and ...

Information Disclosure

github.com/jaegertracing/jaeger is vulnerable to information disclosure. The vulnerability exists as it was logging clear text passwords, of kerberos and plaintext authentication, in the kafka producer...

CVE-2020-6239

Under certain conditions SAP Business One Backup service, versions 9.3, 10.0, allows an attacker with admin permissions to view SYSTEM user password in clear text, leading to Information Disclosure...

Information disclosure

Under certain conditions SAP Business One Backup service, versions 9.3, 10.0, allows an attacker with admin permissions to view SYSTEM user password in clear text, leading to Information Disclosure...

CVE-2020-11681

Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged users can exploit this to create an administrator user and obtain the SMTP credentials...

D-Link DIR-865L Information Disclosure Vulnerability (CNVD-2020-33173)

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in the D-Link DIR-865L Ax version 1.20B01 Beta, which originates from a program that passes sensitive information in clear text. A remote attacker can exploit this vulnerabili...

FreeRDP clear_decompress_subcode_rlex DoS

The vulnerability of the cleardecompresssubcoderlex function in the FreeRDP remote desktop protocol is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Critical SAP ASE Flaws Allow Complete Control of Databases

Researchers are urging users to apply patches for several critical vulnerabilities in SAP’s Adaptive Server Enterprise ASE. If exploited, the most severe flaws could give unprivileged users complete control of databases and – in some cases – even underlying operating systems. ASE previously known...

CVE-2020-13458

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...

Cross site request forgery (csrf)

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...

CVE-2020-13458

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...

CVE-2020-13458

CVE-2020-13458 affects the Craft CMS Image Resizer plugin prior to 2.0.9. The issue is a CSRF flaw in the log-clear controller action, enabling CSRF exploitation with no authentication and requiring user interaction. CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low attack complex...