Lucene search
K

25 matches found

EUVD
EUVD
added 2026/02/03 6:12 p.m.1 views

EUVD-2025-206679

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow autocomplete on password fields may lead to unintended storage or disclosure of sensitive credentials, potentially increasing the risk of unauthorized access. This issue affects...

3.7CVSS5.4AI score0.00078EPSS
Exploits0References1
CVE
CVE
added 2026/02/03 6:12 p.m.8 views

CVE-2025-52623

CVE-2025-52623 affects HCL AION v2.0 where the password field does not have autocomplete disabled, enabling potential storage or disclosure of credentials. Connected sources (CNVD-2026-16403, RH/Red Hat, NVD, and PT-2026-5901) corroborate an information disclosure risk from password-field autocom...

6.5CVSS5.4AI score0.00078EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/03 6:12 p.m.3 views

CVE-2025-52623 HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow autocomplete on password fields may lead to unintended storage or disclosure of sensitive credentials, potentially increasing the risk of unauthorized access. This issue affects...

3.7CVSS5.4AI score0.00078EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.3 views

HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from an information disclosure vulnerability that stems from the password field not disabling autocomplete, which can be exploited by an attacker to cause sensitive credentials to be stored or disclosed...

6.5CVSS5.8AI score0.00078EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-14051

Malware in sbrugna...

5.5CVSS5.4AI score0.00101EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-4667

Malware in sbrugna...

10CVSS6.4AI score0.0109EPSS
Exploits0References3
OSV
OSV
added 2022/09/01 7:15 p.m.1 views

CVE-2021-39045

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocomplete feature on password input fields. IBM X-Force ID: 214345...

5.5CVSS5.8AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/09/01 12:0 a.m.2 views

PT-2022-10863 · Ibm · Ibm Cognos Analytics

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics versions 11.1.7 through 11.2.1 Description: The issue allows a local attacker to obtain information due to the autocomplete feature on password input fields. Recommendations: For versions 11.1.7 through 11.2.1, consider...

6.2CVSS5.9AI score0.00281EPSS
Exploits0References6
OSV
OSV
added 2021/08/31 11:15 a.m.0 views

CVE-2021-34560

In PEPPERL+FUCHS WirelessHART-Gateway = 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once...

5.5CVSS6.4AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/08/31 12:0 a.m.1 views

PT-2021-20545 · Pepperl+Fuchs · Wirelesshart Gateway

Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.9 and earlier Description: A form in the affected software contains a password field with autocomplete enabled, allowing stored credentials to be captured by an attacker who gains control over t...

5.5CVSS5.6AI score0.00052EPSS
Exploits0References3
OSV
OSV
added 2021/07/14 2:15 p.m.1 views

CVE-2021-35527

Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and prior versions...

7.5CVSS7.1AI score0.00276EPSS
Exploits0References1
NVD
NVD
added 2021/07/14 2:15 p.m.9 views

CVE-2021-35527

Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and prior versions...

7.5CVSS0.00276EPSS
Exploits0References1
Prion
Prion
added 2021/07/14 2:15 p.m.13 views

Design/Logic Flaw

Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and prior versions...

5CVSS7.7AI score0.00276EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/14 1:15 p.m.10 views

CVE-2021-35527 Password Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS Application

Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials that are stored by the browser. This issue affects: Hitachi ABB Power Grids eSOMS version 6.3 and prior versions...

7.5CVSS7.9AI score0.00276EPSS
Exploits0References1
CVE
CVE
added 2021/07/14 1:15 p.m.53 views

CVE-2021-35527

CVE-2021-35527 affects Hitachi ABB Power Grids eSOMS web application password field. The issue is described as insufficiently protected credentials stored by the browser, enabling potential disclosure of user credentials for Hitachi ABB Power Grids eSOMS versions 6.3 and earlier. The advisory ICS...

7.5CVSS7.7AI score0.00276EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/07/14 12:0 a.m.2 views

PT-2021-20953 · Hitachi Abb Power Grids · Hitachi Abb Power Grids Esoms

Name of the Vulnerable Software and Affected Versions: Hitachi ABB Power Grids eSOMS versions prior to 6.3 Description: The issue is related to a password autocomplete vulnerability in the web application password field, allowing an attacker to gain access to user credentials stored by the browse...

7.5CVSS7.6AI score0.00276EPSS
Exploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2019/12/20 8:47 a.m.22 views

Security Bulletin: API Connect is impacted by credential caching

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4444 DESCRIPTION: IBM API Connect Developer Portal's user registration page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials...

5.5CVSS1.9AI score0.00101EPSS
Exploits0Affected Software1
NVD
NVD
added 2019/12/16 4:15 p.m.14 views

CVE-2019-4444

IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials can steal the credentials used for registration. IBM X-Force ID: 163453...

5.5CVSS5.2AI score0.00101EPSS
Exploits0References2
Prion
Prion
added 2019/12/16 4:15 p.m.13 views

Design/Logic Flaw

IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials can steal the credentials used for registration. IBM X-Force ID: 163453...

2.1CVSS5.3AI score0.00101EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/12/16 3:45 p.m.16 views

CVE-2019-4444

IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials can steal the credentials used for registration. IBM X-Force ID: 163453...

5.1CVSS5.4AI score0.00101EPSS
Exploits0References2
Rows per page
Query Builder