585 matches found
CVE-2022-41876
CVE-2022-41876 affects ezplatform-graphql (Ibexa DXP and Ibexa Open Source). The vulnerability is caused by insecure storage that allows unauthenticated GraphQL queries to expose user password hashes (typically for admins/editors). Patches exist in Ibexa/DXP versions 2.3.12 and 1.0.13 on the 1.X ...
CVE-2022-3206 Passster < 3.5.5.5.2 - Insecure Storage of Password
The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked...
CVE-2022-3206 Passster < 3.5.5.5.2 - Insecure Storage of Password
The Passster WordPress plugin before 3.5.5.5.2 stores the password inside a cookie named "passster" using base64 encoding method which is easy to decode. This puts the password at risk in case the cookies get leaked...
WordPress Passster plugin <= 3.5.5.5.1 - Insecure Storage of Password vulnerability
Insecure Storage of Password vulnerability discovered by Raad Haddad Cloudyrion GmbH in WordPress Passster plugin versions = 3.5.5.5.1. Solution Update the WordPress Passster – Password Protection plugin to the latest available version at least 3.5.5.5.2...
CVE-2022-35513
The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...
CVE-2022-35513
The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...
CVE-2022-35513
CVE-2022-35513 affects Blink1Control2
CVE-2022-35513
The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...
CVE-2022-35513
The Blink1Control2 application = 2.2.7 uses weak password encryption and an insecure method of storage...
PT-2022-22877 · Unknown · Blink1Control2
Name of the Vulnerable Software and Affected Versions: Blink1Control2 versions prior to 2.2.9 Description: The issue concerns the use of weak password encryption and an insecure method of storage in the Blink1Control2 application. Recommendations: For versions prior to 2.2.9, update to version...
Blink1Control2 加密问题漏洞
Blink1Control2 is a desktop application by Tod Kurt Personal Developer. It is used to control and hook events to blink1. A security vulnerability exists in Blink1Control2 version 2.2.7 and earlier that stems from the use of weak password encryption and insecure storage methods...
CVE-2022-1021
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
CVE-2022-1021
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
CVE-2022-1021
CVE-2022-1021 affects chatwoot/chatwoot prior to 2.6.0 with insecure storage of sensitive information. The connected documents corroborate this, citing risks around exposure of sensitive data (e.g., authentication-related data) and, in some sources, a cross-site scripting vector that can enable t...
CVE-2022-1021 Insecure Storage of Sensitive Information in chatwoot/chatwoot
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
PT-2022-13596 · Chatwoot · Chatwoot
Name of the Vulnerable Software and Affected Versions: chatwoot/chatwoot versions prior to 2.6.0 Description: The issue concerns insecure storage of sensitive information in the GitHub repository chatwoot/chatwoot. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to...
chatwoot 跨站脚本漏洞
chatwoot is a software application. Customer Engagement Suite, an open source alternative to Intercom, Zendesk, Salesforce Service Cloud and more. A cross-site scripting vulnerability exists in versions prior to chatwoot 2.6.0 that stems from insecure storage of sensitive information...
Authentication flaw
Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users a...
Emerson OpenBSI
1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Emerson Equipment: OpenBSI Vulnerabilities: Use of Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key CISA is aware of a public report, “OT:ICEFALL,” that details...
