8927 matches found
GHSA-PMXF-4V8C-RWR7 Incorrect Resource Transfer Between Spheres in Grails
Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP...
Katello cleartext password storage issue
A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.2. Registry credentials used during container image discovery were inadvertently logged without being masked. This flaw could expose the registry credentials to other privileged users...
CVE-2020-8225
A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials...
CVE-2022-29874
A vulnerability has been identified in SICAM T All versions V3.0. Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device...
Code injection
A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850 All versions V3.00, SICAM P850...
CVE-2021-32934 ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information
The affected ThroughTek P2P products SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and firmware using P2PTunnel or RDT module do not sufficiently protect data...
CVE-2021-32934 ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information
The affected ThroughTek P2P products SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and firmware using P2PTunnel or RDT module do not sufficiently protect data...
Acronis Cyber Protect has an unspecified vulnerability (CNVD-2022-64245)
Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 Linux, Windows is vulnerable to a...
CVE-2022-30993
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 29240...
CVE-2022-30994
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Windows before build 29240...
CVE-2022-30993
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 29240...
CVE-2022-30994
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Windows before build 29240...
Design/Logic Flaw
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Windows before build 29240...
Design/Logic Flaw
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 29240...
CVE-2022-30993 Cleartext transmission of sensitive information
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 29240...
CVE-2022-30993
CVE-2022-30993 affects Acronis Cyber Protect 15 (Linux, Windows) before build 29240. The issue is a cleartext transmission of sensitive information. Root cause: data in transit is not encrypted as described in sources; impact includes potential exposure of sensitive data (confidentiality). The CV...
CVE-2022-30994
CVE-2022-30994 concerns plaintext transmission of sensitive information in Acronis Cyber Protect 15 (Windows) before build 29240. The available sources explicitly note a cleartext exposure over the network, affecting that product/version. The connected documents do not provide exploit details or ...
CVE-2022-30994 Cleartext transmission of sensitive information
Cleartext transmission of sensitive information. The following products are affected: Acronis Cyber Protect 15 Windows before build 29240...