Lucene search
+L

9015 matches found

Prion
Prion
added 2022/05/18 8:15 p.m.29 views

Design/Logic Flaw

Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 29240...

5CVSS7.6AI score0.00593EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/18 7:42 p.m.33 views

CVE-2022-30993 Cleartext transmission of sensitive information

Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 29240...

7.8AI score0.00593EPSS
SaveExploits0References1
CVE
CVE
added 2022/05/18 7:42 p.m.85 views

CVE-2022-30993

CVE-2022-30993 affects Acronis Cyber Protect 15 (Linux, Windows) before build 29240. The issue is a cleartext transmission of sensitive information. Root cause: data in transit is not encrypted as described in sources; impact includes potential exposure of sensitive data (confidentiality). The CV...

7.5CVSS7.6AI score0.00593EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/05/18 7:41 p.m.74 views

CVE-2022-30994

CVE-2022-30994 concerns plaintext transmission of sensitive information in Acronis Cyber Protect 15 (Windows) before build 29240. The available sources explicitly note a cleartext exposure over the network, affecting that product/version. The connected documents do not provide exploit details or ...

7.5CVSS7.6AI score0.00593EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/18 7:41 p.m.28 views

CVE-2022-30994 Cleartext transmission of sensitive information

Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Windows before build 29240...

7.8AI score0.00593EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/18 12:00 a.m.5 views

CVE-2022-30994

Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Windows before build 29240...

7.5CVSS7.1AI score0.00593EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/18 12:00 a.m.8 views

CVE-2022-30993

Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 29240...

7.5CVSS7.1AI score0.00593EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/05/18 12:00 a.m.12 views

TIETEN Acronis Cyber Protect 安全漏洞

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 Linux, Windows is vulnerable to a...

7.5CVSS7.4AI score0.00593EPSS
SaveExploits0References3
Snyk
Snyk
added 2022/05/17 4:56 a.m.8 views

Cleartext Storage of Sensitive Information

Overview org.jenkins-ci.plugins:sonar is a SonarQube scanner plugin for Jenkins Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information via the sonar.sonarPassword parameter. An attacker can obtain sensitive information, including cleartext passwords, by...

5.3CVSS6.8AI score0.04987EPSS
SaveExploits4References2
OSV
OSV
added 2022/05/17 4:56 a.m.42 views

GHSA-3X9H-3P7M-33M7 Jenkins SonarQube Plugin Stores Passwords in Cleartext

The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information cleartext passwords by reading the value in the sonar.sonarPassword parameter from jenkins/configure...

5.3CVSS5.5AI score0.04987EPSS
SaveExploits4References3
Github Security Blog
Github Security Blog
added 2022/05/17 4:56 a.m.20 views

Jenkins SonarQube Plugin Stores Passwords in Cleartext

The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information cleartext passwords by reading the value in the sonar.sonarPassword parameter from jenkins/configure...

4CVSS5.5AI score0.04987EPSS
SaveExploits4References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 3:39 a.m.26 views

jwcrypto lacks the Random Filling protection mechanism

The Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack MMA...

5.3CVSS6.5AI score0.02245EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/05/16 6:15 a.m.5 views

CVE-2022-29588

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...

7.5CVSS5.8AI score0.01711EPSS
SaveExploits0References3
NVD
NVD
added 2022/05/16 6:15 a.m.27 views

CVE-2022-29588

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...

7.5CVSS0.01711EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/16 6:15 a.m.10 views

CVE-2022-29588

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...

7.5CVSS5.8AI score0.01711EPSS
SaveExploits0References2
Prion
Prion
added 2022/05/16 6:15 a.m.24 views

Design/Logic Flaw

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...

5CVSS7.8AI score0.01711EPSS
SaveExploits0References2Affected Software45
CVE
CVE
added 2022/05/16 5:30 a.m.85 views

CVE-2022-29588

CVE-2022-29588 affects Konica Minolta bizhub MFP devices before 2022-04-14, where credentials are stored in cleartext in /var/log/nginx/html/ADMINPASS and /etc/shadow. The root cause is cleartext password storage on the device, leading to potential password disclosure and confidentiality impact. ...

7.5CVSS7.7AI score0.01711EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/05/16 5:30 a.m.28 views

CVE-2022-29588

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...

7.9AI score0.01711EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2022/05/14 1:36 a.m.55 views

HashiCorp Consul can use cleartext agent-to-agent RPC communication

HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verifyoutgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade...

5.9CVSS6.9AI score0.01223EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/05/14 1:36 a.m.39 views

GHSA-4QVX-QQ5W-695P HashiCorp Consul can use cleartext agent-to-agent RPC communication

HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verifyoutgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade...

5.9CVSS5.8AI score0.01223EPSS
SaveExploits0References5
Rows per page
Query Builder