3505 matches found
Code injection
An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...
CVE-2017-5146
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text...
CVE-2016-9334
An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...
CVE-2017-5140
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password is stored in clear text...
CVE-2017-5140
CVE-2017-5140 affects Honeywell XL Web II controller family (XL1000C500 XLWebExe-2-01-00 and earlier; XLWeb 500 XLWebExe-1-02-08 and earlier). Root cause: passwords stored in clear text, enabling password disclosure via a specific URL. The vulnerability can be exploited remotely; ICS-CERT notes a...
CVE-2017-5140: Insufficiently Protected Credentials
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. Password is stored in clear text...
PT-2017-16342
Name of the Vulnerable Software and Affected Versions Carlo Gavazzi VMU-C EM versions prior to A11 U05 Carlo Gavazzi VMU-C PV versions prior to A17 Description An issue was discovered where sensitive information is stored in clear-text. Recommendations For Carlo Gavazzi VMU-C EM versions prior to...
CVE-2016-9334: Undefined Security Weakness
An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...
CVE-2017-5146: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text...
PT-2017-16336
Name of the Vulnerable Software and Affected Versions Honeywell XL Web II controller versions XL1000C500 XLWebExe-2-01-00 and prior Honeywell XLWeb 500 versions XLWebExe-1-02-08 and prior Description An issue was discovered where the password is stored in clear text. Recommendations For Honeywell...
USN-3194-1: OpenJDK 7 vulnerabilities
Karthik Bhargavan and Gaetan Leurent discovered that the DES and Triple DES ciphers were vulnerable to birthday attacks. A remote attacker could possibly use this flaw to obtain clear text data from long encrypted sessions. This update moves those algorithms to the legacy algorithm set and causes...
Code injection
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user...
CVE-2016-6092: Exposure of Sensitive Information to an Unauthorized Actor
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user...
ICS, SCADA Security Woes Linger On
A handful of worrisome vulnerabilities in Honeywell building automation system software disclosed last week are case in point of how far the industry continues to lag in securing SCADA and industrial control systems. Honeywell published in September new firmware that patches vulnerabilities...
Credential disclosure in LXCA log files - us
Lenovo Security Advisory: LEN-11635 Potential Impact: Disclosure of credentials to a non-privileged user Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8233 Summary Description: During an internal security review, log files generated by Lenovo XClarity Administrator LXCA...
Credential disclosure in LXCA log files - Lenovo Support US
No description provided...
CVE-2016-8967
IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user...
CVE-2016-5950
IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user...
CVE-2016-5950
CVE-2016-5950 affects IBM Kenexa LCMS Premier on Cloud. The vulnerability is that credentials are stored in plain text and could be read by an authenticated user, exposing sensitive information. The incident is documented with a CVSS3.0 base score of 6.5 (C:H/I:N/A:N) and CVSS2.0 base score 4.0 (...