Lucene search
+L

362 matches found

OSV
OSV
added 2021/12/29 1:15 p.m.5 views

CVE-2021-35035

A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtain sensitive information from the configuration file...

6.5CVSS6.6AI score0.00647EPSS
Exploits0References1
OSV
OSV
added 2021/11/08 5:15 p.m.7 views

CVE-2020-4152

IBM QRadar Network Security 5.4.0 and 5.5.0 transmits sensitive or security-critical data in cleartext in a communication channel that can be obtained using man in the middle techniques. IBM X-Force ID: 17467...

5.9CVSS6.6AI score0.0057EPSS
Exploits0References2
OSV
OSV
added 2021/11/03 8:15 p.m.5 views

CVE-2021-38422

Delta Electronics DIALink versions 1.2.4.0 and prior stores sensitive information in cleartext, which may allow an attacker to have extensive access to the application directory and escalate privileges...

7.8CVSS7.1AI score0.00166EPSS
Exploits0References1
OSV
OSV
added 2021/11/02 12:15 p.m.9 views

CVE-2021-42763

Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The issue occurs when the cluster manager forwards a HTTP request from the pluggable UI query workbench etc to the specific service. In the backtrace, the Basic Auth Header included in the HTTP request,...

7.5CVSS5.8AI score0.00588EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2021/11/02 12:15 p.m.4 views

CVE-2021-42763

Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The issue occurs when the cluster manager forwards a HTTP request from the pluggable UI query workbench etc to the specific service. In the backtrace, the Basic Auth Header included in the HTTP request,...

7.5CVSS7AI score0.00588EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2021/10/21 6:29 p.m.4 views

CVE-2021-38422

Delta Electronics DIALink versions 1.2.4.0 and prior stores sensitive information in cleartext, which may allow an attacker to have extensive access to the application directory and escalate privileges...

7.8CVSS7AI score0.00166EPSS
Exploits0References2
OSV
OSV
added 2021/09/14 11:15 a.m.5 views

CVE-2021-33716

A vulnerability has been identified in SIMATIC CP 1543-1 incl. SIPLUS variants All versions V3.0, SIMATIC CP 1545-1 All versions V1.1. An attacker with access to the subnet of the affected device could retrieve sensitive information stored in cleartext...

6.5CVSS6.5AI score0.00253EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/09/14 11:15 a.m.3 views

CVE-2021-33716

A vulnerability has been identified in SIMATIC CP 1543-1 incl. SIPLUS variants All versions V3.0, SIMATIC CP 1545-1 All versions V1.1. An attacker with access to the subnet of the affected device could retrieve sensitive information stored in cleartext...

6.5CVSS6.5AI score0.00253EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/09/14 12:0 a.m.6 views

PT-2021-20292 · Siemens · Simatic Cp 1545-1 +1

Name of the Vulnerable Software and Affected Versions: SIMATIC CP 1543-1 incl. SIPLUS variants versions prior to V3.0 SIMATIC CP 1545-1 versions prior to V1.1 Description: A vulnerability has been identified that allows an attacker with access to the subnet of the affected device to retrieve...

6.5CVSS6.2AI score0.00253EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2021/08/25 12:15 p.m.2 views

CVE-2021-33883

A Cleartext Transmission of Sensitive Information vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to obtain sensitive information by snooping on the network traffic. The exposed data includes critical values for a pump's internal configuration...

7.5CVSS7.3AI score0.00832EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2021/05/14 1:15 p.m.4 views

CVE-2020-27185

Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, device configuration, and other sensitive data transmitted over Moxa Service...

7.5CVSS5.4AI score0.00732EPSS
Exploits0References4
OSV
OSV
added 2021/05/07 7:31 p.m.4 views

CVE-2021-27569

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can maximize or minimize the window of a running process by sending the process name in a crafted packet. This information is sent in cleartext and is not protected by any authentication logic...

5.3CVSS5.8AI score0.00637EPSS
Exploits1References2
CVE
CVE
added 2021/05/07 4:31 p.m.38 views

CVE-2021-27571

CVE-2021-27571 affects Emote Remote Mouse up to version 4.0.0.0. The issue allows an attacker to retrieve recently used and running applications, their icons, and their file paths. The data is sent in cleartext and not protected by any authentication logic. Connected documents confirm the affecte...

5.3CVSS6.4AI score0.01148EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2021/02/26 10:15 p.m.4 views

CVE-2021-26564

Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session...

8.7CVSS7.3AI score0.00602EPSS
Exploits1References2
OSV
OSV
added 2021/02/26 10:15 p.m.7 views

CVE-2021-26565

Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session...

5.9CVSS6.8AI score0.00669EPSS
Exploits1References2
OSV
OSV
added 2021/02/26 10:15 p.m.5 views

CVE-2021-26560

Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session...

7.4CVSS7.2AI score0.00691EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2021/02/26 12:0 a.m.7 views

PT-2021-17038 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.3-25426-3 Description: The issue concerns the cleartext transmission of sensitive information in the synoagentregisterd component, allowing man-in-the-middle attackers to spoof servers vi...

9CVSS8.5AI score0.00691EPSS
Exploits1References5
OSV
OSV
added 2021/01/13 10:15 p.m.8 views

CVE-2021-1226

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager...

6.5CVSS6.5AI score0.00908EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/01/06 12:0 a.m.66 views

IBM HTTP Server 8.5.0.0 <= 8.5.5.4 / 8.0.0.0 <= 8.0.0.10 / 7.0.0.0 <= 7.0.0.35 / 6.1.0.0 <= 6.1.0.47 / 6.0.0.0 <= 6.0.2.43 (521711)

The version of IBM HTTP Server running on the remote host is affected by a vulnerability. The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway,...

4.3CVSS6.8AI score0.99999EPSS
Exploits7References2
NVD
NVD
added 2020/08/26 8:15 p.m.21 views

CVE-2020-15485

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering...

5.5CVSS5.6AI score0.00191EPSS
Exploits0References2
Rows per page
Query Builder