PT-2023-27488 · Lg · Lg Simple Editor

Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows remote attackers to bypass authentication on affected installations of LG Simple Editor. The specific flaw exists within the getServerSetting method, resulting fr...

TSplus 安全漏洞

TSplus is a remote access software software from TSplus. A security vulnerability exists in TSplus version 16.0.0.0, which stems from credentials being stored in an insecure manner, in plaintext on an html login page, which allows any user with access to the web login page to view the html code...

Paessler PRTG Network Monitor Cross-Site Request Forgery Vulnerability

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler, Germany. A cross-site request forgery vulnerability exists in Paessler PRTG Network Monitor version 23.2.83.1760, which stems from NetApp Volume Sensor transmitting plaintext credentials ove...

Class Scheduling System Security Vulnerability

Class Scheduling System is a class scheduling system by jkev individual developers. A security vulnerability exists in PHPJabbers Class Scheduling System version 1.0, which stems from a lack of password encryption when editing a user account updating a user's page, which allows an attacker to...

Fujitsu Software Infrastructure Manager Security Vulnerability

Fujitsu Software Infrastructure Manager is an infrastructure manager from Fujitsu Japan. A security vulnerability exists in Fujitsu Software Infrastructure Manager prior to version 2.8.0.061, which stems from the ismsnap component collecting and storing authorization credentials in plaintext. A...

Jenkins Gradle Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

YSoft SAFEQ 6 安全漏洞

YSoft SAFEQ 6 is an enterprise print management suite solution platform from the Czech company YSoft. A security vulnerability exists in YSoft SAFEQ 6 Server versions prior to 6.0.82, which stems from the fact that when changing the URL of an LDAP server configuration from LDAPS to LDAP, the syst...

CVE-2023-31277

PiiGAB M-Bus transmits credentials in plaintext format...

CVE-2023-31277 PiiGAB M-Bus Unprotected Transport of Credentials

PiiGAB M-Bus transmits credentials in plaintext format...

PiiGAB M-Bus

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PiiGAB, Processinformation i Göteborg Aktiebolag Equipment: M-Bus SoftwarePack 900S Vulnerabilities: Code Injection, Improper Restriction of Excessive Authentication Attempts, Unprotected Transport of...

Makves DCAP 安全漏洞

Makves DCAP is a data protection and risk management related to the storage and access of information resources from the Russian company Makves. A security vulnerability exists in Makves DCAP version v3.0.0.122, which stems from incorrect access control. An attacker exploits the vulnerability to...

PT-2023-13230 · Ibm · Ibm Security Directory Suite Va

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Suite VA versions 8.0.1 through 8.0.1.19 Description: The issue allows an authenticated user to read user credentials stored in plain clear text. Recommendations: For IBM Security Directory Suite VA versions 8.0.1 throu...

IBM Security Directory Suite 安全漏洞

IBM Security Directory Suite is a scalable, standards-based identity platform from International Business Machines IBM that simplifies identity and directory management. An information disclosure vulnerability exists in IBM Security Directory Suite VA, which could be exploited by an attacker to...

Danfoss AK-EM100 web applications 安全漏洞

Danfoss AK-EM100 web applications is a web application from Danfoss, Denmark. It provides a web-based graphical user interface to the store that allows a range of everyday users to locally or remotely monitor data, alarms and reports on all their refrigeration equipment. A security vulnerability...

Contec CONPROSYS HMI System 安全漏洞

Contec CONPROSYS HMI System is an HTML5 technology-based HMI Human Machine Interface/SCADA Supervisory Control and Data Acquisition software product from Contec Japan. A security vulnerability exists in Contec CONPROSYS HMI System versions prior to 3.5.3, which stems from database account details...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2023-41891)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server version 11.7...

Quest Software KACE Systems Deployment Appliance 安全漏洞

Quest Software KACE Systems Deployment Appliance is Quest Software's fast, automated system and disk imaging software. A security vulnerability exists in Quest Software KACE Systems Deployment Appliance version 9.0.146 that stems from the presence of publicly available LDAP binding credentials,...

IBM InfoSphere Information Server 安全漏洞

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server version 11.7...

myMail iOS 安全漏洞

myMail is an open source mail client from mailbox.org. A security vulnerability exists in myMail iOS version 14.30 and earlier versions, which stems from the application sending plaintext credentials...

Jedox 安全漏洞

Jedox is a corporate performance management software from Jedox Inc. for planning, analyzing and reporting in finance and other areas such as sales, human resources and purchasing. A security vulnerability exists in Jedox version 2022.4.2 and prior versions. An attacker exploited the vulnerabilit...