CVE-2024-45638

IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user...

CVE-2024-45638

IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user...

CVE-2024-45638 IBM QRadar EDR information disclosure

IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user...

CVE-2024-45638 IBM QRadar EDR information disclosure

IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user...

CVE-2024-45638

CVE-2024-45638 impacts IBM Security QRadar EDR 3.12. The root cause is plaintext storage of user credentials, enabling read access by a local privileged user and leading to information disclosure of sensitive data. Reported by IBM QRadar notes, the impact is limited to confidentiality (C:H) with ...

Linux Distros Unpatched Vulnerability : CVE-2024-36464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. Th...

Linux Distros Unpatched Vulnerability : CVE-2018-10846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination ...

Cleartext Transmission of Sensitive Information

Overview skypilot is a SkyPilot: Run AI on Any Infra — Unified, Faster, Cheaper. Affected versions of this package are vulnerable to Cleartext Transmission of Sensitive Information by transmitting traffic over plain HTTP sensitive API requests are exposed to interception and man-in-the-middle...

CVE-2025-0941

MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users...

CVE-2025-0941 MET ONE 3400+ Potential Credential Exposure

MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not available to unauthenticated users...

CVE-2025-0941

CVE-2025-0941 affects Beckman Coulter MET ONE 3400+ instruments running software v1.0.41. Under rare conditions, credentials can be temporarily stored in plain text within the system; this data is not accessible to unauthenticated users. The CVE entry itself does not specify a patched version or ...

PT-2025-8736 · Unknown · Met One 3400+

Name of the Vulnerable Software and Affected Versions: MET ONE 3400+ version 1.0.41 Description: The issue concerns the temporary storage of credentials in plain text within the system under rare conditions. This data is not accessible to unauthenticated users. Recommendations: For version 1.0.41...

CVE-2024-5462 Brocade Fabric OS may capture SNMP Passwords in clear text

If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP privsecret / authsecret fields can be exposed in plaintext. The plaintext passwords can be exposed in a configupload capture or a supportsave capture if encryption of passwords ...

Fyrox has unsound usages of `Vec::from_raw_parts`

The library provides a public safe API transmutevecasbytes, which incorrectly assumes that any generic type T could have stable layout, causing to uninitialized memory exposure if the users pass any types with padding bytes as T and cast it to u8 pointer. In the issue, we develop a PoC to show...

Vulnerabilities fixed in Schneider Electric ASCO

Schneider Electric fixed vulnerabilities in ASCO Annunciator The vulnerabilities include a critical vulnerability that allows malicious firmware to be downloaded without integrity checks, which can lead to device inoperability. In addition, a vulnerability stems from allocating resources without...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/9p: Only the RWX permissions are translated for the plain 9P2000. Garbage data is allowed to pass through the perm bits of the plain 9P2000, allowing it to set, among other things, the suid bit. This probably wasn’t the intend...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: Do not enable IRQ from syncprintobj. Since the commit a6aa8fca4d79 “dma-buf/sw-sync: Reduce irqsave/irqrestore from known context”, an error occurred where spinunlockirqrestore was replaced with spinunlockirq for...

Unspecified Vulnerability in coolLabs Coolify

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. An unspecified vulnerability exists in coolLabs Coolify that originates from an authenticated user retrieving any existing private key on an instance in plain text. No detailed vulnerability details are provided at th...

GHSA-G6QQ-C9F9-2772 Keycloak on Quarkus CLI option for encrypted JGroups ignored

The env option KCCACHEEMBEDDEDMTLSENABLED does not work and the jgroups replication configuration is always used in plain. This option worked before in 24 and 22. More info in public issue https://github.com/keycloak/keycloak/issues/34644...

Keycloak on Quarkus CLI option for encrypted JGroups ignored

The env option KCCACHEEMBEDDEDMTLSENABLED does not work and the jgroups replication configuration is always used in plain. This option worked before in 24 and 22. More info in public issue https://github.com/keycloak/keycloak/issues/34644...