2872 matches found
Fedora: Security Advisory for golang-gitlab-commonmark-linkify (FEDORA-2022-37aef44d1e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: golang-gitlab-commonmark-linkify-0-0.10.20200805git64bca66.fc36
Package linkify provides a way to find what looks like links in plain text...
Citilog 安全漏洞
Citilog is a video analytics and artificial intelligence application for traffic management solutions from Citilog. A security vulnerability exists in Citilog version 8.0, which can be exploited by an attacker to view FTP credentials as plaintext HTTP traffic...
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Description The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session Proof of Concept PHPSESSID:"ID" Created:"Tue, 19 Jul 2022 13:15:32 GMT" Domain:"demo.pimcore.fun" Expires / Max-Age:"Sessio...
Dell Wyse Management Suite < 3.8 Multiple Vulnerabilities (DSA-2022-134)
The version of Dell Wyse Management Suite installed on the remote host is prior to 3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2022-134 advisory. - Wyse Management Suite 3.7 and earlier contains a Sensitive Data Exposure vulnerability. A low privileged...
CVE-2022-33928
Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker with low privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to...
Fedora: Security Advisory for golang-gitlab-commonmark-linkify (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: golang-gitlab-commonmark-linkify-0-0.9.20200805git64bca66.fc35
Package linkify provides a way to find what looks like links in plain text...
Security Bulletin: IBM UrbanCode Deploy (UCD) could disclose sensitive database information to a local user in plain text. (CVE-2022-22367)
Summary Certain data for recurring activites may be internally stored in a plain text format. Vulnerability Details CVEID: CVE-2022-22367 DESCRIPTION: IBM UrbanCode Deploy UCD could disclose sensitive database information to a local user in plain text. CVSS Base score: 4 CVSS Temporal Score: See:...
Important: thunderbird
Issue Overview: crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions prior to 0.7.4 and 0.8.0, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of other tasks that are...
CVE-2022-32210
Undici.ProxyAgent never verifies the remote server's certificate, and always exposes all request & response data to the proxy. This unexpectedly means that proxies can MitM all HTTPS traffic, and if the proxy's URL is HTTP then it also means that nominally HTTPS requests are actually sent via...
CVE-2022-1794
The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...
Design/Logic Flaw
The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...
3S-Smart Software Solutions CODESYS 安全漏洞
CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in 3S-Smart Software Solutions CODESYS OPC DA Server versions prior to V3.5.18.20, which stems from the PLC storing passwords as plain text in its configuration file, which is...
PT-2022-14118 · 3S Smart Software Solutions · Codesys Opc Da Server
Name of the Vulnerable Software and Affected Versions: CODESYS OPC DA Server versions prior to V3.5.18.20 Description: The issue concerns the storage of PLC passwords in plain text within the configuration file of the CODESYS OPC DA Server, making these passwords visible to all authorized Microso...
HCL Technologies HCL Launch Information Disclosure Vulnerability (CNVD-2022-58411)
HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, India. for handling the most complex deployment processes in DevOps. HCL Technologies HCL Launch suffers from an information disclosure vulnerability that stems from the...
CVE-2022-27549
HCL Launch may store certain data for recurring activities in a plain text format...
CVE-2022-27549
HCL Launch may store certain data for recurring activities in a plain text format...
