4220 matches found
Modicon Controllers Information Disclosure
The vulnerability of Modicon controllers’ microprogramming software lies in the transmission of confidential information as open text using the Modbus TCP protocol during controller programming. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
CVE-2019-16545
Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2019-16545
Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure...
Command injection
Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2019-16545
CVE-2019-16545 affects Jenkins QMetry for JIRA - Test Management Plugin. The issue is that credentials are transmitted in plain text as part of job configuration forms, which can lead to exposure. Connected sources indicate that passwords are stored encrypted on disk since version 1.13, but the p...
CVE-2019-16545
Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2019-16545
Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure...
PT-2019-14700 · Jenkins · Jenkins Qmetry For Jira - Test Management Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins QMetry for JIRA - Test Management Plugin versions prior to 1.13 Description: The issue concerns the transmission of credentials in plain text as part of job configuration forms, potentially leading to their exposure. Although the...
inflectra-spira-integration stored credentials in plain text
inflectra-spira-integration stored a credential unencrypted in its global configuration file com.inflectra.spiratest.plugins.SpiraBuilder.xml on the Jenkins controller. This credential could be viewed by users with access to the Jenkins controller file system. inflectra-spira-integration now stor...
qmetry-for-jira-test-management stored credentials in plain text
qmetry-for-jira-test-management stored credentials unencrypted in job config.xml files on the Jenkins controller as part of its post-build step configuration. This credential could be viewed by users with Extended Read permission or access to the Jenkins controller file system...
Security Bulletin: IBM MQ Java/JMS application can incorrectly flow password in plain text. (CVE-2017-1337)
Summary IBM MQ Java/JMS application can incorrectly flow password in plain text when PASSWORDPROTECTION=ALWAYS is set in mqclient.ini Vulnerability Details CVEID: CVE-2017-1337 DESCRIPTION: IBM MQ Java/JMS application can incorrectly transmit user credentials in plain text. CVSS Base Score: 5.9...
PayPal: Token leak in security challenge flow allows retrieving victim's PayPal email and plain text password
A bug was identified whereby sensitive, unique tokens were being leaked in a JS file used by the recaptcha implementation. In certain cases, a user must solve a CAPTCHA challenge after authenticating. When the security challenge is completed, the authentication request is replayed to log in. The...
GHSA-M553-9WMX-533H Cross-site scripting in Dolibarr
In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS...
CVE-2019-16210
Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save...
Default credentials
Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save...
CVE-2019-16210: Missing Encryption of Sensitive Data
Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save...
Amazon's Ring Video Doorbell Lets Attackers Steal Your Wi-Fi Password
Security researchers at Bitdefender have discovered a high-severity security vulnerability in Amazon's Ring Video Doorbell Pro devices that could allow nearby attackers to steal your WiFi password and launch a variety of cyberattacks using MitM against other devices connected to the same network...
CVE-2019-4307
IBM Security Guardium Big Data Intelligence SonarG 4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 160987...