CVE-2016-5638

There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.401.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genieping.htm or genieping2.htm or...

Authentication flaw

A vulnerability is in the 'BSWcxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.507.0.50, and DGND3700, version DGND3700-V1.0.0.171.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text...

Authentication flaw

There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.401.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genieping.htm or genieping2.htm or...

CVE-2016-5649 Netgear DGN2200 and DGND3700 disclose the administrator password

A vulnerability is in the 'BSWcxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.507.0.50, and DGND3700, version DGND3700-V1.0.0.171.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text...

CVE-2016-5638 Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877 reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text

There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.401.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genieping.htm or genieping2.htm or...

CVE-2016-5649

Vulnerability summary (CVE-2016-5649) : Netgear DGN2200 (V1.0.0.50_7.0.50) and DGND3700 (V1.0.0.17_1.0.17) expose an unauthenticated admin password via the web page BSW_cxttongr.htm. When accessed, the page processes the request and returns the administrator password in clear text before redirect...

GHSA-69MV-3642-WJ3W Low severity vulnerability that affects sensu

The sensu rubygem prior to version 1.2.0 contains a CWE-522 Insufficiently Protected Credentials flaw that can result in sensitive configuration data e.g. passwords being logged in clear-text. Users are advised to upgrade to rubygem version 1.2.1 or later...

Multiple Echelon Products Information Disclosure Vulnerability (CNVD-2018-18306)

Echelon SmartServer 1 and others are products of Echelon Corporation of the United States. echelon SmartServer 1 is a multifunctional controller, which supports building automation control and enterprise energy management, etc. i.LON 100 is a network server, which is mainly used to configure and...

Design/Logic Flaw

The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file...

Design/Logic Flaw

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346...

CVE-2018-1621

CVE-2018-1621 affects IBM WebSphere Application Server (versions 7.0, 8.0, 8.5, 9.0) and can disclose clear text passwords via a trace file due to improper handling of datasource custom properties. The issue enables a local attacker with access to trace data to recover credentials, representing a...

CVE-2018-11639

Dialogic PowerMedia XMS prior to version 3.5 SU2 suffers a vulnerability where passwords are stored in plaintext inside cookies handled by /var/www/xms/application/controllers/verifyLogin.php. This plaintext storage enables remote attackers to access user passwords in cleartext. The CVE entry cit...

CVE-2018-7782

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text...

CVE-2018-7782

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text...

Code injection

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text...

CVE-2018-7782

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text...

Security Bulletin: Information Disclosure Vulnerability in Tivoli Business Service Manager (CVE-2016-0286)

Summary Information about an information disclosure security vulnerability affecting Tivoli Business Service Manager TBSM is published in this security bulletin. Manipulation of communication between the TBSM Dashboard server and the TBSM Data Server could result in information disclosure...

Security Bulletin: Critical Security Vulnerability in RDS Client library affecting Rational Change (CVE-2014-3089)

Summary Clear text password in IBM Rational Directory Server RDS supplied Client library could allow potential hacker to gain access to RDS and access to unauthorized data used by consuming products such as Rational Change. Vulnerability Details | Subscribe to My Notifications to be notified of...

Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by a Password in Clear Text vulnerability (CVE-2018-1377 )

Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1377 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG stores user credentials in plain in clear text which can be read by a local user. CVSS...

Security Bulletin: IBM Security Guardium is affected by Password in Clear Text vulnerability (CVE-2017-1259)

Summary IBM Security Guardium transmits user credentials in plain in clear text which can be read by an attacker. IBM Security Guardium has provided a fix for this vulnerability. Vulnerability Details CVEID: CVE-2017-1259 DESCRIPTION: IBM Security Guardium transmits user credentials in plain in...