862 matches found
CVE-2017-6694
CVE-2017-6694 affects Cisco Ultra Services Platform's Virtual Network Function Manager (VNFM) logging function. A vulnerability allows an authenticated, local attacker to view sensitive data (cleartext credentials) on an affected system, via the VNFM logging interface. Affected release: 21.0.v0.6...
CVE-2017-6694
A vulnerability in the Virtual Network Function Manager's VNFM logging function of Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive data cleartext credentials on an affected system. More Information: CSCvd29355. Known Affected Releases: 21.0.v0.65839...
CVE-2016-6653
The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...
Design/Logic Flaw
The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...
CVE-2016-6653
The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...
CVE-2016-6653
Summary of CVE-2016-6653 (MariaDB audit_plugin in CF cf-mysql-release 27/28) The MariaDB audit_plugin integrated into PCF cf-mysql-release versions 27 and 28 can emit audit logs to syslog. A bug causes those logs to include sensitive information, potentially exposing application data and cleartex...
CVE-2016-5683
ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQLConfig.aspx file and decrypting data with a hardcoded key in the ReadyDesk.dll file...
CVE-2015-7915
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2015-7915
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2015-7915
CVE-2015-7915 affects Sauter moduWeb Vision (EY-WS505F0x0) prior to firmware 1.6.0. The vulnerability involves cleartext transmission of credentials, enabling remote attackers to obtain sensitive information by sniffing network traffic. The ICSA/CISA advisory notes remote exploitation potential a...
CVE-2015-7915
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...
Avira Mobile Security iOS Application - Cleartext Credentials Vulnerability
Avira Mobile Security iOS Application - Cleartext Credentials Vulnerability -- http://www.info-sec.ca/advisories/Avira-Mobile-Security.html Overview "Avira Mobile Security is the ideal tool to recover a lost phone and ensure that your email has not been compromised." "Avira Mobile Security helps...
CVE-2015-3951
RLE Nova-Wind Turbine HMI devices store cleartext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...
Design/Logic Flaw
RLE Nova-Wind Turbine HMI devices store cleartext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-3951
RLE Nova-Wind Turbine HMI devices store cleartext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-3951
The CVE concerns the Nova-Wind Turbine HMI from RLE International GmbH. The vulnerability stems from plaintext storage of credentials in the HMI, enabling a remote attacker who can access the credential file to obtain sensitive information and authenticate to the device. Reported impact includes ...
ESC 8832 Data Controller Session Hijacking
=begin Exploit Title: ESC 8832 Data Controller multiple vulnerabilities Date: 2014-05-29 Platform: SCADA / Web Application Exploit Author: Balazs Makany Vendor Homepage: www.envirosys.com Version: ESC 8832 Data Controller Hardware Tested on: ESC 8832 Data Controller Hardware CVE : N/A Yet POC for...
ESC 8832 Data Controller - Multiple Vulnerabilities
ESC 8832 Data Controller - Multiple Vulnerabilities =begin Exploit Title: ESC 8832 Data Controller multiple vulnerabilities Date: 2014-05-29 Platform: SCADA / Web Application Exploit Author: Balazs Makany Vendor Homepage: www.envirosys.com Version: ESC 8832 Data Controller Hardware Tested on: ESC...