CVE-2026-59271

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-59271 Admin password disclosed in BrokerNotAliveException message

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

EUVD-2026-66847

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-59271

Spring AMQP (versions 2.4.18 and earlier, 3.2.0–3.2.12, 4.0.0–4.0.4, and 4.1.0) is affected by an information disclosure vulnerability. When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext within the BrokerNotAliveException message, potentiall...

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache

Vulnérabilité de stockage en texte clair - CVE-2023-5359 dans W3 Total Cache Cible les versions ≤2.7.5 vulnérables à CVE-2023-5359 import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS =...

EUVD-2026-66762

A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...

PT-2026-82781

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication o...

PT-2026-82802

A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of the component OAuth Callback. The manipulation results in cleartext transmission of sensitive information. The attack may be performed fro...

SUSE SLES12: postgresql16 / postgresql16-contrib / postgresql16-devel / etc (SUSE-SU-2026:3794-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3794-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...

PT-2026-82777

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

CVE-2026-58070

A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320: Memorizzazione in chiaro di informazioni sensibili in memoria in Abacre Restaurant Point of Sale POS. Tutte le versioni di Abacre Restaurant Point of Sale POS fino alla 15.0.0.1656 sono vulnerabili alla memorizzazione in chiaro di informazioni sensibili in memoria...

CVE-2020-25748

CVE-2020-25748 Vorgeschlagene Beschreibung Ein Problem mit der Klartextübertragung wurde entdeckt an den Kameras Rubetek RV-3406, RV-3409 und RV-3411 Firmware-Versionen v342, v339. Ein Angreifer in der Mitte kann die Videodaten der Kamera abfangen und modifizieren, welche unverschlüsselt übertrag...

CVE-2026-58070

A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...

CVE-2026-58070

CVE-2026-58070 affects Veeam Backup & Replication 13.0.2.29 and all earlier 13.x builds (Windows-based and Veeam Software Appliance deployments; older 12.x versions are not affected). The root cause is that guest OS credentials used for Application Aware processing are written in cleartext to a s...

CVE-2023-5359

CVE-2023-5359 - W3 Total Cache क्लियरटेक्स्ट स्टोरेज भेद्यता विवरण CVE-2023-5359 एक क्लियरटेक्स्ट स्टोरेज भेद्यता है जो वर्डप्रेस प्लगइन W3 Total Cache के संस्करण ≤ 2.7.5 को प्रभावित करती है। यह भेद्यता दूरस्थ हमलावरों को संवेदनशील क्रेडेंशियल्स तक पहुंचने की अनुमति देती है जो अनएन्क्रिप्टेड PHP...

CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 Ein Problem im wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 ermöglicht es einem entfernten Angreifer, vertrauliche Informationen durch die fehlende Verschlüsselung während des Anmeldeprozesses zu erlangen. CVE-2024-42657: Zusammenfassung: Eine Schwachstelle im...

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

CVE-2026-29988

Milesight IoT devices (multiple models, affected firmware versions) are vulnerable to cleartext transmission of sensitive information through the NFC interface. An unauthenticated attacker with physical proximity can read LoRaWAN ABP NwkSKey , AppSKey , and D2D keys via a simple NFC read operatio...

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...