9690 matches found
CVE-2025-52579
Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it...
CVE-2025-53861: Cleartext Transmission of Sensitive Information
A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle MitM and Cross-site scripting XSS attacks allowing attackers to read transmitted data...
CVE-2025-52579: Cleartext Storage of Sensitive Information in Memory
Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it...
CVE-2025-50109: Cleartext Storage of Sensitive Information in Memory
Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere...
CVE-2025-50109 Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory
Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere...
CVE-2025-50109
CVE-2025-50109 concerns Emerson ValveLink Products that store sensitive information in cleartext in memory (and possibly in disk/core dumps) accessible within the system. The CVE’s details across sources (NVD, Red Hat, CNNVD, CVE list) indicate the vulnerability stems from improper handling/clear...
CVE-2025-52579
The CVE-2025-52579 vulnerability affects Emerson ValveLink Products, where sensitive data is stored in cleartext in memory. The memory may be written to disk, included in core dumps, or remain uncleared after crashes, exposing confidentiality and potentially integrity/availability risks. Connecte...
CVE-2025-52579 Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory
Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it...
CVE-2025-52579 Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory
Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it...
CVE-2025-6392
Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server...
CVE-2025-6392 Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)
Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server...
CVE-2025-6392 Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)
Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server...
CVE-2025-6392
Brocade SANnav prior to version 2.4.0a exposes database passwords in cleartext in audit logs generated by the daily data dump collector when docker exec commands run. Logs reside on the host VM local audit logs and are not controlled by SANnav, only visible to the host admin. Affected release is ...
CVE-2025-6390 Cleartext storage of sensitive information in Brocade SANnav server audit logs.
Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the...
CVE-2025-6390
CVE-2025-6390 affects Brocade SANnav versions prior to 2.4.0a. Under certain conditions, passwords and PBE keys are logged into the Brocade SANnav server audit logs, which are part of the local server VM audit logs and are not controlled by SANnav; these logs are only visible to the host server a...
CVE-2025-27889
Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the downloadpass.html endpoint, allowing injection of an arbitrary link. If a user clicks a crafted link, this discloses a cleartext password to the attacker...
CVE-2025-27889
Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the downloadpass.html endpoint, allowing injection of an arbitrary link. If a user clicks a crafted link, this discloses a cleartext password to the attacker...
CVE-2025-44251
Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process...
CVE-2025-27889: External Control of System or Configuration Setting
Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the downloadpass.html endpoint, allowing injection of an arbitrary link. If a user clicks a crafted link, this discloses a cleartext password to the attacker...