9690 matches found
CVE-2025-7397: Cleartext Storage of Sensitive Information
A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface CLI in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized...
CVE-2025-7357
LITEON IC48A firmware versions prior to 01.00.19r and LITEON IC80A firmware versions prior to 01.01.12e store FTP-server-access-credentials in cleartext in their system logs...
CVE-2025-7357 Plaintext Storage of a Password in LITEON IC48A and IC80A EV Chargers
LITEON IC48A firmware versions prior to 01.00.19r and LITEON IC80A firmware versions prior to 01.01.12e store FTP-server-access-credentials in cleartext in their system logs...
CVE-2025-53756
CVE-2025-53756 affects Digisol DG-GR6821AC Router. The issue is cleartext transmission of credentials in the web management interface, allowing a remote attacker to intercept network traffic and gain unauthorized access. CVSS 4.0 base score 8.7 (HIGH) with network access, low attack complexity, n...
CVE-2025-53756 Cleartext Transmission Vulnerability in Digisol DG-GR6821AC Router
This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remote attacker could exploit this vulnerability by intercepting the network traffic and capturing cleartext credentials. Successful exploitation of this...
CVE-2025-53756 Cleartext Transmission Vulnerability in Digisol DG-GR6821AC Router
This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remote attacker could exploit this vulnerability by intercepting the network traffic and capturing cleartext credentials. Successful exploitation of this...
CVE-2025-53755 Cleartext Storage Vulnerability in Digisol DG-GR6821AC Router
This vulnerability exists in Digisol DG-GR6821AC Router due to storage of credentials and PINS without encryption in the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the unencrypted dat...
CVE-2025-53755
CVE-2025-53755 affects Digisol DG-GR6821AC Router. The vulnerability stems from credentials and PINs stored unencrypted in the device firmware. An attacker with physical access could extract the firmware and reverse‑engineer the binary data to read unencrypted credentials, potentially gaining una...
CVE-2025-32353: Cleartext Storage of Sensitive Information
Kaseya Rapid Fire Tools Network Detective 2.0.16.0 has Unencrypted Credentials for privileged access stored in the collector.txt configuration file...
CVE-2025-53758: Cleartext Storage of Sensitive Information
This vulnerability exists in Digisol DG-GR6821AC Router due to use of default admin credentials at its web management interface. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the hardcoded default...
CVE-2025-53756: Cleartext Transmission of Sensitive Information
This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remote attacker could exploit this vulnerability by intercepting the network traffic and capturing cleartext credentials. Successful exploitation of this...
CVE-2025-53755: Cleartext Storage of Sensitive Information
This vulnerability exists in Digisol DG-GR6821AC Router due to storage of credentials and PINS without encryption in the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the unencrypted dat...
PT-2025-29774 · Digisol · Digisol Dg-Gr6821Ac Router
Name of the Vulnerable Software and Affected Versions: Digisol DG-GR6821AC Router affected versions not specified Description: The Digisol DG-GR6821AC Router transmits credentials in cleartext through its web management interface. A remote attacker could intercept network traffic and capture thes...
The vulnerability of the Warrior Framework plugin for Jenkins’ automation servers, related to the storage of passwords in an open manner, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Jenkins automation server’s Warrior Framework plugin lies in the storage of passwords in an exposed manner within the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...
CVE-2025-52579
Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it...
CVE-2025-50109
Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere...
CVE-2025-27889
Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the downloadpass.html endpoint, allowing injection of an arbitrary link. If a user clicks a crafted link, this discloses a cleartext password to the attacker...
CVE-2025-44251
Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process...
CVE-2025-7215
A vulnerability, which was classified as problematic, has been found in FNKvision FNK-GU2 up to 40.1.7. Affected by this issue is some unknown functionality of the file /rom/wpasupplicant.conf. The manipulation leads to cleartext storage of sensitive information. It is possible to launch the atta...