Lucene search
+L

1111 matches found

ATTACKERKB
ATTACKERKB
added 2021/02/11 12:00 a.m.6 views

CVE-2021-20410

IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190...

5.3CVSS5.9AI score0.00714EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/02/03 12:00 a.m.30 views

MediaWiki Information Disclosure Vulnerability (CNVD-2021-09324)

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. An information disclosure vulnerability exists in the Push extension for MediaWiki 1.35 and prior versions...

7.5CVSS6.1AI score0.00655EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/02 12:00 a.m.10 views

Dell EMC Unity and UnityVSA Information Disclosure Vulnerability

Dell EMC Unity is a unified storage array product. the UnityVSA is a set of virtual Unity storage environments. An information disclosure vulnerability exists in Dell EMC Unity, Unity XT and UnityVSA versions prior to 5.0.4.0.5.012. The vulnerability stems from the program storing user credential...

6.7CVSS6.5AI score0.00261EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/29 12:00 a.m.14 views

MediaWiki 信息泄露漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. An information disclosure vulnerability exists in the Push extension for MediaWiki 1.35 and prior versions...

7.5CVSS7.1AI score0.00655EPSS
SaveExploits0References4
OSV
OSV
added 2021/01/15 6:15 p.m.7 views

CVE-2021-0212

An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...

5CVSS5.8AI score0.00312EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/14 12:00 a.m.10 views

IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2021-03531)

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.2. The vulnerability stems from the product...

4.4CVSS5.9AI score0.00302EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/13 12:00 a.m.11 views

IBM Security Guardium Insights 安全漏洞

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.2. The vulnerability stems from the product...

4.4CVSS5.8AI score0.00192EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/13 12:00 a.m.16 views

Cisco Firepower Management Center 信息泄露漏洞

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. An information disclosure vulnerability exists in the storage of...

5.5CVSS6AI score0.00259EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/01/07 12:00 a.m.8 views

Dell EMC PowerStore Information Disclosure Vulnerability

The Dell EMC PowerStore is a storage device from Dell USA. A security vulnerability exists in Dell EMC PowerStore versions prior to version 1.0.3.0.5.007, which stems from a storage vulnerability containing a plaintext password. A locally authenticated attacker could exploit the vulnerability to...

7.5CVSS6.5AI score0.002EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/05 12:00 a.m.12 views

DELL Dell EMC Unity和UnityVSA 日志信息泄露漏洞

Dell EMC Unity is a unified storage array product. the UnityVSA is a set of virtual Unity storage environments. An information disclosure vulnerability exists in Dell EMC Unity, Unity XT and UnityVSA versions prior to 5.0.4.0.5.012. The vulnerability stems from the program storing user credential...

6.7CVSS6.6AI score0.00261EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/01/05 12:00 a.m.14 views

Dell EMC Unity,UnityVSA 安全漏洞

DELL Dell EMC Unity and UnityVSA are both products of Dell DELL Corporation, U.S.A. Dell EMC Unity is a unified storage array product.UnityVSA is a set of virtual Unity storage environments. A security vulnerability exists in Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012,...

6.7CVSS6.6AI score0.00164EPSS
SaveExploits0References2
NCSC
NCSC
added 2020/12/23 12:00 a.m.14 views

Serious vulnerability fixed in Zyxel products

A vulnerability has been fixed in Zyxel products. A researcher found an undocumented user whose both the username and password could be found in plaintext were in firmware. This undocumented account has admin rights. Zyxel has released updates to fix the vulnerability. Zyxel indicated that for AP...

10CVSS6.8AI score0.90155EPSS
SaveExploits2
CVE
CVE
added 2020/11/23 8:56 p.m.63 views

CVE-2020-24227

Playground Sessions v2.5.582 and earlier for Windows stores user credentials in plain text, enabling anyone with access to UserProfiles.sol to extract email and password. Affected component/file: UserProfiles.sol within the Windows build. Root cause: credentials stored in cleartext rather than us...

7.5CVSS7.3AI score0.01401EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2020/11/23 12:00 a.m.15 views

Playground Sessions Information Disclosure Vulnerability

GraphQL Playground is a graphical, interactive, in-browser GraphQL IDE Integrated Development Environment based on GraphiQL from Prisma Labs, Germany. A security vulnerability exists in Playground Sessions version v2.5.582 and prior versions, which stems from storing user credentials in plaintext...

7.5CVSS7.1AI score0.01401EPSS
SaveExploits1References2
OSV
OSV
added 2020/08/26 7:15 p.m.11 views

CVE-2019-4697

IBM Security Guardium Data Encryption GDE 3.0.0.2 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 171938...

6.5CVSS6.3AI score0.0052EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/20 4:15 p.m.31 views

CVE-2020-16280

Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating...

5.5CVSS5.4AI score0.0026EPSS
SaveExploits0References1
OSV
OSV
added 2020/08/20 4:15 p.m.11 views

CVE-2020-16280

Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating...

5.5CVSS6.1AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/08/20 3:22 p.m.36 views

CVE-2020-16280

Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administrators. To exploit the vulnerability a local attacker must have access to the underlying operating...

5.5AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2020/08/20 3:22 p.m.49 views

CVE-2020-16280

CVE-2020-16280 affects RangeeOS 8.0.4 modules, where credentials are stored in plaintext. A local attacker with OS access can obtain credentials for multiple users, including external-facing administrative services, domain users, and local administrators. The connected sources confirm plaintext c...

5.5CVSS5.4AI score0.0026EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2020/07/27 7:15 p.m.11 views

CVE-2020-10609

Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device...

7.5CVSS7.1AI score0.01519EPSS
SaveExploits0References1
Rows per page
Query Builder