8890 matches found
CVE-2024-28024
CVE-2024-28024 concerns Hitachi Energy’s FOXMAN-UN/UNEM, where sensitive information is stored in plaintext in a resource accessible to another control sphere. Connected docs describe the root cause as cleartext storage within the FOXMAN-UN server/APIGateway and related components, leading to pot...
CVE-2024-28024
A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere...
CVE-2024-28024
A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessible to another control sphere...
CVE-2024-35208
A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V1.2. The affected web server stored the password in cleartext. This could allow attacker in a privileged position to obtain access passwords...
CVE-2024-35208
A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V1.2. The affected web server stored the password in cleartext. This could allow attacker in a privileged position to obtain access passwords...
CVE-2024-35208
The CVE-2024-35208 entry concerns Siemens SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) with all versions prior to V1.2 affected. The root issue is Credential Protection Insufficiency: the web server stores passwords in cleartext, enabling a privileged attacker to obtain access passwords. The publi...
CVE-2024-35208
A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V1.2. The affected web server stored the password in cleartext. This could allow attacker in a privileged position to obtain access passwords...
CVE-2024-35208
A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V1.2. The affected web server stored the password in cleartext. This could allow attacker in a privileged position to obtain access passwords...
Siemens SINEC Traffic Analyzer 安全漏洞
SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. Siemens SINEC Traffic Analyzer suffers from a sensitive information...
PT-2024-22219 · Unknown · Foxman-Un/Unem
Name of the Vulnerable Software and Affected Versions: FOXMAN-UN/UNEM affected versions not specified Description: A vulnerability exists where sensitive information is stored in cleartext within a resource that might be accessible to another control sphere. Recommendations: At the moment, there ...
CVE-2024-37393
Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through blind LDAP injection attacks against the DESKTOP service exposed on the...
Emerson PACSystem and Fanuc
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.6 ATTENTION : Low attack complexity Vendor : Emerson Equipment : PACSystem, Fanuc Vulnerabilities : Cleartext Transmission of Sensitive Information, Insufficient Verification of Data Authenticity Insufficiently Protected Credentials, Download of Code...
Cleartext Password Storage
statamic/cms is vulnerable to Cleartext Password Storage. This vulnerability is due to the insecure handling of password confirmation data, which affects users registered via the user:registerform tag and using file-based user accounts. The vulnerability allows an attacker, who gains access to us...
Multiple vulnerabilities in Sharp and Toshiba Tec MFPs
Overview Sharp and Toshiba Tec MFPs multifunction printers contain multiple vulnerabilities listed below. Stack-based Buffer Overflow CWE-121 - CVE-2024-28038 Incorrect Permission Assignment for Critical Resource CWE-732 - CVE-2024-28955 Cleartext Storage of Sensitive Information CWE-312 -...
RHEL 6 : 389-ds-base (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - 389-ds-base: Password brute-force possible for locked account due to different return codes CVE-2017-7551...
RHEL 5 : pidgin (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pidgin: Out-of-bounds write in purplemarkupunescapeentity triggered by invalid XML CVE-2017-2640 - cipher...
RHEL 6 : pidgin (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pidgin: Out-of-bounds write in purplemarkupunescapeentity triggered by invalid XML CVE-2017-2640 - Pidgin...
CVE-2024-36426
In TARGIT Decision Suite 23.2.15007.0 before Autumn 2023, the session token is part of the URL and may be sent in a cleartext HTTP session...
CVE-2024-36426
The CVE-2024-36426 entry documents a vulnerability in TARGIT Decision Suite prior to Autumn 2023 (version 23.2.15007.0) where the session token is included in the URL, potentially transmitted over cleartext HTTP. Reported impact indicates high confidentiality risk (C: High while I and A are None)...