Lucene search
+L

8898 matches found

OSV
OSV
added 2023/05/15 11:15 a.m.14 views

CVE-2023-31408

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to potentially steal user credentials that are stored in the user’s browsers local storage via cross-site-scripting attac...

7.5CVSS7.1AI score0.00428EPSS
SaveExploits0References3
NVD
NVD
added 2023/05/15 11:15 a.m.48 views

CVE-2023-31408

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to potentially steal user credentials that are stored in the user’s browsers local storage via cross-site-scripting attac...

7.5CVSS5.8AI score0.00428EPSS
SaveExploits0References3
CVE
CVE
added 2023/05/15 10:55 a.m.68 views

CVE-2023-31408

The CVE-2023-31408 entry affects the SICK FTMg AIR FLOW SENSOR (partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526). Root cause: cleartext storage of sensitive information in the browser’s local storage, enabling potential exposure through cross-site scripting. Impact state...

7.5CVSS7.1AI score0.00428EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/05/15 10:55 a.m.48 views

CVE-2023-31408

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to potentially steal user credentials that are stored in the user’s browsers local storage via cross-site-scripting attac...

5.3CVSS7.5AI score0.00428EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/05/15 10:55 a.m.8 views

CVE-2023-31408

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to potentially steal user credentials that are stored in the user’s browsers local storage via cross-site-scripting attac...

5.3CVSS7.1AI score0.00428EPSS
SaveExploits0References3
OSV
OSV
added 2023/05/15 6:15 a.m.18 views

CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

7.5CVSS6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/05/15 12:00 a.m.19 views

PT-2023-23302

Name of the Vulnerable Software and Affected Versions SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 Description The issue allows a remote attacker to potentially steal user credentials stored in the user's browser's local storage via...

7.5CVSS7.2AI score0.00428EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2023/05/15 12:00 a.m.40 views

CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

7.7AI score0.04397EPSS
SaveExploits5References3
CNNVD
CNNVD
added 2023/05/15 12:00 a.m.12 views

SICK FTMg 安全漏洞

SICK FTMg is a flow sensor from SICK. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that stems from the presence of sensitive information stored in clear text, allowing a remote attacker to potentially steal user credentials stored locally in a user's browser via a cross-site...

7.5CVSS7AI score0.00428EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/05/15 12:00 a.m.130 views

CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

7.5CVSS6.9AI score0.04397EPSS
SaveIn wildExploits5References6
OSV
OSV
added 2023/05/12 2:15 p.m.12 views

CVE-2022-47880

An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function...

5.3CVSS5.7AI score0.02926EPSS
SaveExploits4References2
Prion
Prion
added 2023/05/12 2:15 p.m.31 views

Information disclosure

An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function...

2.1CVSS5.1AI score0.02926EPSS
SaveExploits4References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/12 12:00 a.m.10 views

CVE-2022-47880

An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function...

5AI score0.02926EPSS
SaveExploits4References2
CVE
CVE
added 2023/05/12 12:00 a.m.75 views

CVE-2022-47880

The CVE-2022-47880 vulnerability affects Jedox implementations exposing /be/rpc.php (test connection) and allows remote, authenticated users with permission to modify database connections to disclose cleartext passwords. The issue is demonstrated in Jedox versions such as 2020.2.5 and is also cit...

6.8CVSS5AI score0.02926EPSS
SaveExploits4References1Affected Software2
Cvelist
Cvelist
added 2023/05/12 12:00 a.m.58 views

CVE-2022-47880

An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function...

5.3AI score0.02926EPSS
SaveExploits4References1
Positive Technologies
Positive Technologies
added 2023/05/12 12:00 a.m.10 views

PT-2023-15513 · Jedox · Jedox

Name of the Vulnerable Software and Affected Versions: Jedox versions 2020.2.5 Description: The issue allows remote, authenticated users with permissions to modify database connections to disclose a connection's cleartext password via the 'test connection' function in the /be/rpc.php endpoint. Th...

6.8CVSS5AI score0.02926EPSS
SaveExploits4References5
NVD
NVD
added 2023/05/10 6:15 a.m.27 views

CVE-2023-24586

Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product...

6.5CVSS6.1AI score0.0055EPSS
SaveExploits0References6
OSV
OSV
added 2023/05/10 6:15 a.m.8 views

CVE-2023-25070

Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product...

6.5CVSS5.9AI score0.00507EPSS
SaveExploits0References6
OSV
OSV
added 2023/05/10 6:15 a.m.12 views

CVE-2023-24586

Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product...

6.5CVSS5.8AI score0.0055EPSS
SaveExploits0References6
NVD
NVD
added 2023/05/10 6:15 a.m.25 views

CVE-2023-25070

Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product...

6.5CVSS6.5AI score0.00507EPSS
SaveExploits0References6
Rows per page
Query Builder