3432 matches found
PT-2024-35204 · Ibm · Ibm Storage Defender - Resiliency Service
Name of the Vulnerable Software and Affected Versions: IBM Storage Defender - Resiliency Service versions 2.0.0 through 2.0.9 Description: The issue concerns the storage of user credentials in plain text, which can be accessed by an authenticated user with access to the pod. This allows potential...
CVE-2024-10973 Keycloak: cli option for encrypted jgroups ignored
A vulnerability was found in Keycloak. The environment option KCCACHEEMBEDDEDMTLSENABLED does not work and the JGroups replication configuration is always used in plain text which can allow an attacker that has access to adjacent networks related to JGroups to read sensitive information...
PT-2024-16676 · Red Hat · Keycloak
Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: A vulnerability was found in Keycloak where the environment option KC CACHE EMBEDDED MTLS ENABLED does not work, and the JGroups replication configuration is always used in plain text. Thi...
CVE-2024-54349
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mashiurz Plain Post plain-post allows Stored XSS.This issue affects Plain Post: from n/a through = 1.0.3...
CVE-2024-54349
CVE-2024-54349 is a Stored XSS in the Plain Post WordPress plugin. Affected: Plain Post versions up to 1.0.3. Root cause: improper input neutralization during web page generation. Impact: stored cross-site scripting could affect site visitors. Remediation: update to Plain Post 1.0.3 or later (pat...
CVE-2024-54349 WordPress Plain Post plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mashiurz Plain Post plain-post allows Stored XSS.This issue affects Plain Post: from n/a through = 1.0.3...
CVE-2024-54349 WordPress Plain Post plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mashiurz.com Plain Post allows Stored XSS.This issue affects Plain Post: from n/a through 1.0.3...
PT-2024-36234 · Unknown · Plain Post
Name of the Vulnerable Software and Affected Versions: Plain Post versions 1.0.3 and earlier Description: The issue is related to Cross-site Scripting XSS and is identified as a Stored XSS vulnerability. This vulnerability allows for improper neutralization of input during web page generation. Th...
WordPress plugin Plain Post 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
WordPress Plain Post plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Plain Post versions = 1.0.3...
CVE-2024-53292
Dell VxVerify (versions before x.40.405) contains a Plain-text Password Storage Vulnerability in the shell wrapper. A local high-privilege attacker could disclose user credentials and reuse them to access the vulnerable component with the compromised account’s privileges. Affected product/version...
PT-2024-35716 · Dell · Dell Vxverify
Name of the Vulnerable Software and Affected Versions: Dell VxVerify versions prior to x.40.405 Description: The issue concerns a Plain-text Password Storage Vulnerability in the shell wrapper of Dell VxVerify. A local high privileged attacker could potentially exploit this vulnerability, leading...
TP-LINK WR845N 安全漏洞
The TP-LINK WR845N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK WR845N version V4200909 and version V4190219, which originates from transmitting user credentials in plain text after performing a restore of factory settings...
IBM Workload Scheduler Information Disclosure Vulnerability
IBM Workload Scheduler is a suite of enterprise task scheduling software from International Business Machines IBM. The software automates the control of workloads. An information disclosure vulnerability exists in IBM Workload Scheduler versions 9.5, 10.1, and 10.2, which stems from storing user...
ABB ASPECT 安全漏洞
ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. ABB ASPECT has a security vulnerability that originates from a web browser interface that may be able to manipulate application usernames/passwords in plaintext or Base64 encoding...
Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-1505001355 fixes several issues. The following security issues were fixed: CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool bsc1225429. CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. CVE-2024-43861: Fix memor...
SUSE CVE-2024-36464
When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...
CVE-2024-36464
When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...
Zabbix 安全漏洞
Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in Zabbix that stems from the fact that when exporting media types, passwords will be exported in plain...
