854 matches found
CVE-2024-48248
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials...
CVE-2024-48248
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials. Recent assessments: Assessed Attacker Value: 0 Assesse...
CVE-2024-31840
An issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords in the HTML source code. An authenticated user is able to edit the configuration of the email server. Once the user access the edit function, the web application fills the edit form with the current...
CVE-2025-22896
mySCADA myPRO Manager stores credentials in cleartext, which could allow an attacker to obtain sensitive information...
mySCADA myPRO Manager Credential Harvester (CVE-2025-24865 and CVE-2025-22896)
Credential Harvester in MyPRO Manager use auxiliary/admin/scada/mypro/mgrcreds msf undefinedmgrcreds show actions ...actions... msf undefinedmgrcreds set ACTION msf undefinedmgrcreds show options ...show and set options... msf undefinedmgrcreds run class MetasploitModule 'mySCADA myPRO Manager...
CVE-2024-26155 ETIC Telecom Remote Access Server (RAS) Cleartext Transmission of Sensitive Information
All versions of ETIC Telecom Remote Access Server RAS prior to 4.5.0 expose clear text credentials in the web portal. An attacker can access the ETIC RAS web portal and view the HTML code, which is configured to be hidden, thus allowing a connection to the ETIC RAS ssh server, which could enable ...
CVE-2024-48121
The HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over the GIOP protocol. This allows attackers to possibly gain access to sensitive information via a man-in-the-middle attack...
Eaton 9PX Insufficiently Protected Credentials (CVE-2018-9280)
An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user's password. The web page displayed by the appliance contains the password in cleartext. Passwords of the read and write users could be retrieved by browsing the source code of the webpage. Th...
PT-2024-38784 · Schneider Electric · Evlink Home Smart/Charge Firmware
Name of the Vulnerable Software and Affected Versions: Schneider Electric EVlink Home Smart/Charge Firmware affected versions not specified Description: A Cleartext Storage of Sensitive Information issue exists, exposing test credentials in the firmware binary. This could lead to data exposure. T...
CVE-2024-25658
Cleartext storage of passwords in Infinera TNMS Transcend Network Management System Server 19.10.3 allows attackers with access to the database or exported configuration files to obtain SNMP users' usernames and passwords in cleartext...
CVE-2024-6785
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure...
CVE-2024-6785
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure...
CVE-2024-6785 MXview One and MXview One Central Manager Series store cleartext credentials in a local file
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure...
CVE-2024-6785 MXview One and MXview One Central Manager Series store cleartext credentials in a local file
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure...
CVE-2024-45862
Kastle Systems firmware prior to May 1, 2024, stored machine credentials in cleartext, which may allow an attacker to access sensitive information...
PT-2024-28855 · No Ip · No-Ip Dynamic Update Client
Name of the Vulnerable Software and Affected Versions: No-IP Dynamic Update Client DUC versions 3.x Description: The No-IP Dynamic Update Client DUC v3.x uses cleartext credentials that may occur on a command line or in a file. The vendor's position is that cleartext in /etc/default/noip-duc is...
CVE-2024-40457
No-IP Dynamic Update Client DUC v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: the vendor's position is that cleartext in /etc/default/noip-duc is recommended and is the intentional behavior...
CVE-2024-40457
No-IP Dynamic Update Client DUC v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: the vendor's position is that cleartext in /etc/default/noip-duc is recommended and is the intentional behavior...
CVE-2024-41927
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated...
PT-2024-7786 · Unknown · Mxview One +1
Name of the Vulnerable Software and Affected Versions: MXview One and MXview One Central Manager affected versions not specified Description: The configuration file stores credentials in cleartext, allowing an attacker with local access rights to read or modify the file. This could result in the...