CVE-2022-32210

Undici.ProxyAgent never verifies the remote server's certificate, and always exposes all request & response data to the proxy. This unexpectedly means that proxies can MitM all HTTPS traffic, and if the proxy's URL is HTTP then it also means that nominally HTTPS requests are actually sent via...

CVE-2022-32210

Undici.ProxyAgent never verifies the remote server's certificate, and always exposes all request & response data to the proxy. This unexpectedly means that proxies can MitM all HTTPS traffic, and if the proxy's URL is HTTP then it also means that nominally HTTPS requests are actually sent via...

CVE-2022-32210

Undici.ProxyAgent never verifies the remote server's certificate, and always exposes all request & response data to the proxy. This unexpectedly means that proxies can MitM all HTTPS traffic, and if the proxy's URL is HTTP then it also means that nominally HTTPS requests are actually sent via...

CVE-2022-1794

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...

Design/Logic Flaw

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...

PT-2022-14118 · 3S Smart Software Solutions · Codesys Opc Da Server

Name of the Vulnerable Software and Affected Versions: CODESYS OPC DA Server versions prior to V3.5.18.20 Description: The issue concerns the storage of PLC passwords in plain text within the configuration file of the CODESYS OPC DA Server, making these passwords visible to all authorized Microso...

3S-Smart Software Solutions CODESYS 安全漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in 3S-Smart Software Solutions CODESYS OPC DA Server versions prior to V3.5.18.20, which stems from the PLC storing passwords as plain text in its configuration file, which is...

HCL Technologies HCL Launch Information Disclosure Vulnerability (CNVD-2022-58411)

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, India. for handling the most complex deployment processes in DevOps. HCL Technologies HCL Launch suffers from an information disclosure vulnerability that stems from the...

CVE-2022-27549

HCL Launch may store certain data for recurring activities in a plain text format...

CVE-2022-27548

HCL Launch stores user credentials in plain clear text which can be read by a local user...

CVE-2022-27549

HCL Launch may store certain data for recurring activities in a plain text format...

Format string

HCL Launch may store certain data for recurring activities in a plain text format...

Design/Logic Flaw

HCL Launch stores user credentials in plain clear text which can be read by a local user...

CVE-2022-27549

CVE-2022-27549 affects HCL Launch. The vulnerability is an information-disclosure issue where data for recurring activities may be stored in plain text, exposing sensitive information and impacting confidentiality. Reported in multiple sources (NVD entry and CNVD/CNNVD references), with CVSS metr...

CVE-2022-27549 HCL Launch could disclose sensitive database information to a local user in plain text.

HCL Launch may store certain data for recurring activities in a plain text format...

CVE-2022-27548

CVE-2022-27548 relates to HCL Launch, where the vulnerability is an information disclosure due to storing user credentials in plaintext. The issue can be exploited by a local attacker who has access to read these credentials. Affected software is the HCL Launch platform; the underlying cause is s...

CVE-2022-27548 HCL Launch is vulnerable to information disclosure which can be read by a local user.

HCL Launch stores user credentials in plain clear text which can be read by a local user...

CVE-2022-27549: Insertion of Sensitive Information into Log File

HCL Launch may store certain data for recurring activities in a plain text format...

PT-2022-18480 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue concerns the storage of certain data for recurring activities in a plain text format. Recommendations: At the moment, there is no information about a newer version that contain...

IBM UrbanCode Deploy Information Disclosure Vulnerability (CNVD-2022-51651)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM Corporation in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology to automate the deployment of complex applications in...