Lucene search
+L

8842 matches found

Cvelist
Cvelist
added 2025/07/16 11:21 a.m.22 views

CVE-2025-53756 Cleartext Transmission Vulnerability in Digisol DG-GR6821AC Router

This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remote attacker could exploit this vulnerability by intercepting the network traffic and capturing cleartext credentials. Successful exploitation of this...

8.7CVSS0.00265EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/16 11:18 a.m.3 views

CVE-2025-53755 Cleartext Storage Vulnerability in Digisol DG-GR6821AC Router

This vulnerability exists in Digisol DG-GR6821AC Router due to storage of credentials and PINS without encryption in the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the unencrypted dat...

5.1CVSS6.3AI score0.00091EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/16 11:18 a.m.20 views

CVE-2025-53755

CVE-2025-53755 affects Digisol DG-GR6821AC Router. The vulnerability stems from credentials and PINs stored unencrypted in the device firmware. An attacker with physical access could extract the firmware and reverse‑engineer the binary data to read unencrypted credentials, potentially gaining una...

5.1CVSS6.3AI score0.00091EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.20 views

PT-2025-29774 · Digisol · Digisol Dg-Gr6821Ac Router

Name of the Vulnerable Software and Affected Versions: Digisol DG-GR6821AC Router affected versions not specified Description: The Digisol DG-GR6821AC Router transmits credentials in cleartext through its web management interface. A remote attacker could intercept network traffic and capture thes...

8.7CVSS6.3AI score0.00265EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/07/16 12:00 a.m.11 views

The vulnerability of the Warrior Framework plugin for Jenkins’ automation servers, related to the storage of passwords in an open manner, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server’s Warrior Framework plugin lies in the storage of passwords in an exposed manner within the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...

6.8CVSS5.4AI score0.00298EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/07/13 12:40 a.m.14 views

CVE-2025-52579

Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it...

9.4CVSS6.5AI score0.00385EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/13 12:39 a.m.18 views

CVE-2025-50109

Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere...

8.5CVSS6.7AI score0.00121EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/12 12:28 a.m.16 views

CVE-2025-27889

Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the downloadpass.html endpoint, allowing injection of an arbitrary link. If a user clicks a crafted link, this discloses a cleartext password to the attacker...

8.8CVSS6.9AI score0.00421EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/07/12 12:28 a.m.18 views

CVE-2025-44251

Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process...

7.5CVSS6.5AI score0.00193EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/11 4:17 a.m.7 views

CVE-2025-7215

A vulnerability, which was classified as problematic, has been found in FNKvision FNK-GU2 up to 40.1.7. Affected by this issue is some unknown functionality of the file /rom/wpasupplicant.conf. The manipulation leads to cleartext storage of sensitive information. It is possible to launch the atta...

1.6CVSS3.5AI score0.00094EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/11 12:15 a.m.27 views

CVE-2025-50109

Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere...

8.5CVSS0.00121EPSS
SaveExploits0References3
NVD
NVD
added 2025/07/11 12:15 a.m.14 views

CVE-2025-52579

Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it...

9.4CVSS0.00385EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/07/10 11:39 p.m.29 views

CVE-2025-50109 Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere...

8.5CVSS0.00121EPSS
SaveExploits0References3
CVE
CVE
added 2025/07/10 11:39 p.m.34 views

CVE-2025-50109

CVE-2025-50109 concerns Emerson ValveLink Products that store sensitive information in cleartext in memory (and possibly in disk/core dumps) accessible within the system. The CVE’s details across sources (NVD, Red Hat, CNNVD, CVE list) indicate the vulnerability stems from improper handling/clear...

8.5CVSS6.2AI score0.00121EPSS
SaveExploits0References3
CVE
CVE
added 2025/07/10 11:37 p.m.66 views

CVE-2025-52579

The CVE-2025-52579 vulnerability affects Emerson ValveLink Products, where sensitive data is stored in cleartext in memory. The memory may be written to disk, included in core dumps, or remain uncleared after crashes, exposing confidentiality and potentially integrity/availability risks. Connecte...

9.4CVSS5.9AI score0.00385EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/07/10 11:37 p.m.17 views

CVE-2025-52579 Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it...

9.4CVSS0.00385EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/07/10 11:37 p.m.5 views

CVE-2025-52579 Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it...

9.4CVSS6.5AI score0.00385EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/10 10:15 p.m.13 views

CVE-2025-6392

Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server...

4.4CVSS5.8AI score0.00136EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/10 9:14 p.m.8 views

CVE-2025-6392 Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)

Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server...

6.7CVSS7AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/10 9:14 p.m.23 views

CVE-2025-6392 Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)

Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server...

6.7CVSS0.00136EPSS
SaveExploits0References1
Rows per page
Query Builder