CVE-2005-4755

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier 1 stores the private key passphrase CustomTrustKeyStorePassPhrase in cleartext in nodemanager.config; or, during domain creation with the Configuration Wizard, renders an SSL private key passphrase in cleartext 2 on a terminal or 3 in a...

CVE-2024-56428

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials from the CONFIGS table for their servers configured in the client...

CVE-2024-56428

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials from the CONFIGS table for their servers configured in the client...

CVE-2024-56428

The CVE-2024-56428 entry concerns itech iLabClient 3.7.1. A local attacker can read cleartext credentials stored in the local iLabClient database (CONFIGS table), exposing server configuration secrets and compromising confidentiality. The underlying issue is local access to the client database ra...

CVE-2024-56428

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials from the CONFIGS table for their servers configured in the client...

CVE-2024-56428

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials from the CONFIGS table for their servers configured in the client...

CVE-2025-40583

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions with SINEMA Remote Connect Edge Client installed. Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information...

CVE-2025-4537

A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.8.9 and classified as problematic. Affected by this issue is some unknown functionality of the file ruoyi-ui/jsencrypt.js and ruoyi-ui/login.vue of the component Password Handler. The manipulation leads to cleartext storage of sensitive...

CVE-2025-40583

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions with SINEMA Remote Connect Edge Client installed. Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information...

CVE-2025-40583

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions with SINEMA Remote Connect Edge Client installed. Affected devices do transmit sensitive information in cleartext. This could allow a privileged local attacker to retrieve this sensitive information...

CVE-2025-40583

The CVE-2025-40583 entry concerns Siemens SCALANCE LPE9403 with SINEMA Remote Connect Edge Client installed. It discloses that affected devices transmit sensitive information in cleartext, enabling a privileged local attacker to retrieve that data. The public materials (NVD, Red Hat, CNVD, CN?) c...

TeleMessage TM SGNL Hidden Functionality Vulnerability

TeleMessage TM SGNL contains a hidden functionality vulnerability in which the archiving backend holds cleartext copies of messages from TM SGNL application users...

CVE-2025-4537

A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.8.9 and classified as problematic. Affected by this issue is some unknown functionality of the file ruoyi-ui/jsencrypt.js and ruoyi-ui/login.vue of the component Password Handler. The manipulation leads to cleartext storage of sensitive...

CVE-2025-4537

CVE-2025-4537 affects yangzongzhuan/RuoYi-Vue up to version 3.8.9, specifically the Password Handler components in ruoyi-ui/jsencrypt.js and ruoyi-ui/login.vue. The issue enables cleartext storage of sensitive information in a cookie, with remote attack potential and relatively high attack comple...

CVE-2025-3758

WF2220 exposes endpoint /cgi-bin-igd/netcoreget.cgi that returns configuration of the device to unauthorized users. Returned configuration includes cleartext password. The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-47729

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL aka Archive Signal app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as...

CVE-2025-27720

The CVE-2025-27720 entry concerns Pixmeo OsiriX MD Web Portal, where credential information is transmitted without encryption. This unencrypted transmission is the root cause, enabling potential credential disclosure by an attacker over the network. Documented assessments assign high risk (CVSS v...

CVE-2025-27720 Pixmeo OsiriX MD Cleartext Transmission of Sensitive Information

The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials...

CVE-2025-27720 Pixmeo OsiriX MD Cleartext Transmission of Sensitive Information

The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials...

CVE-2025-47729

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL aka Archive Signal app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as...