20 matches found
CVE-2026-43824
A flaw was found in Argo CD. The ServerSideDiff feature allows for the reading of cleartext Kubernetes Secret data. This vulnerability could lead to information disclosure, potentially exposing sensitive configuration details within the Kubernetes environment. Mitigation Mitigation for this issue...
EUVD-2026-26726
In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data...
CVE-2026-5380 runZero Platform cleartext secret exposure
An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insufficiently Protected Credentials, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 5.3...
CVE-2026-5380 runZero Platform cleartext secret exposure
An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insufficiently Protected Credentials, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 5.3...
CVE-2026-5380
CVE-2026-5380 affects the runZero Platform and describes an issue where an authorized user could view clear-text secrets for a subset of credential types and fields (CWE-522: Insufficiently Protected Credentials). The vulnerability is attributed to improper protection of credentials and is rated ...
EUVD-2020-0064
Malware in sbrugna...
CVE-2019-10682
django-nopassword before 5.0.0 stores cleartext secrets in the database...
Cleartext Storage of Sensitive Information
Overview org.jenkins-ci.main:jenkins-core is an open source automation server. Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information due to improper redaction of encrypted values in config.xml when accessed via REST API or CLI. An attacker with...
PT-2025-6496 · Brocade · Brocade Sannav
Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.1b Description: The issue allows an authenticated, local attacker to view sensitive information in clear text, including passwords and SNMP responses that contain AuthSecret and PrivSecret. This can occur...
PT-2023-31526 · Growi · Growi
Name of the Vulnerable Software and Affected Versions: GROWI versions prior to v6.0.6 Description: The issue concerns the storage of sensitive information in cleartext form on the App Settings page, located at "/admin/app". This could allow an attacker with access to the page to obtain the Secret...
Loytec LINX Configurator 7.4.10 Insecure Transit / Cleartext Secrets Vulnerability
CVE : CVE-2023-46383, CVE-2023-46384, CVE-2023-46385 + Title : Multiple vulnerabilities in Loytec LINX Configurator + Vendor : LOYTEC electronics GmbH + Affected Products : LINX Configurator 7.4.10 + Affected Components : LINX Configurator + Discovery Date : 01-Sep-2021 + Publication date :...
Loytec LINX Automation Servers Information Disclosure / Cleartext Secrets Vulnerability
Loytec LINX-151 with firmware version 7.2.4 and LINX-212 with firmware version 6.2.4 suffer from file disclosure vulnerabilities that leak secrets as well as issues with stories secrets in the clear. + CVE : CVE-2023-46386, CVE-2023-46387, CVE-2023-46388, CVE-2023-46389 + Title : Multiple...
Loytec LINX Configurator 7.4.10 Insecure Transit / Cleartext Secrets
CVE : CVE-2023-46383, CVE-2023-46384, CVE-2023-46385 + Title : Multiple vulnerabilities in Loytec LINX Configurator + Vendor : LOYTEC electronics GmbH + Affected Products : LINX Configurator 7.4.10 + Affected Components : LINX Configurator + Discovery Date : 01-Sep-2021 + Publication date :...
Loytec L-INX Automation Servers Information Disclosure / Cleartext Secrets
CVE : CVE-2023-46386, CVE-2023-46387, CVE-2023-46388, CVE-2023-46389 + Title : Multiple vulnerabilities in Loytec L-INX Automation Servers + Vendor : LOYTEC electronics GmbH + Affected Products : LINX-151, Firmware 7.2.4, LINX-212, firmware 6.2.4 + Affected Components : L-INX Automation Servers +...
GHSA-37CF-R3W2-GJFW django-nopassword stores secrets in cleartext
django-nopassword before 5.0.0 stores cleartext secrets in the database...
django-nopassword stores secrets in cleartext
django-nopassword before 5.0.0 stores cleartext secrets in the database...
CVE-2019-10682
django-nopassword before 5.0.0 stores cleartext secrets in the database...
PYSEC-2020-229
django-nopassword before 5.0.0 stores cleartext secrets in the database...
PYSEC-2020-229
django-nopassword before 5.0.0 stores cleartext secrets in the database...
CVE-2019-10682
django-nopassword before 5.0.0 stores cleartext secrets in the database...