Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/03/05 1:57 a.m.5 views

CVE-2026-2590

Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...

9.8CVSS5.9AI score0.00421EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/03 9:22 p.m.3 views

CVE-2026-2590

Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...

5.9AI score0.00421EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/03 9:22 p.m.3 views

CVE-2026-2590

Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by...

5.9AI score0.00421EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.5 views

PT-2026-22827

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2025.3.30 and earlier Description An issue exists in the connection entry component of the software where the 'Disable password saving in vaults' setting is not properly enforced. This allows an...

9.8CVSS5.9AI score0.00421EPSS
Exploits0References10
OSV
OSV
added 2025/06/29 12:15 p.m.3 views

CVE-2024-24915

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them...

7.2CVSS5.8AI score0.00175EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:20 a.m.16 views

CVE-2019-17375

cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated SEC-517...

8.8CVSS7AI score0.01078EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/04 12:0 a.m.21 views

CVE-2025-32111

The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for actions/checkout...

8.7CVSS0.00335EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/04/04 12:0 a.m.8 views

CVE-2025-32111

The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for actions/checkout...

8.7CVSS7.2AI score0.00335EPSS
Exploits0References3
OSV
OSV
added 2020/11/17 1:15 a.m.3 views

DEBIAN-CVE-2020-13353

When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above...

3.2CVSS4.5AI score0.00271EPSS
Exploits0References1
Rows per page
Query Builder