Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a fabric agent from Fortinet, Inc. It is used to provide protection, compliance, and secure access in a single modular lightweight client. A security vulnerability exists in Fortinet FortiClient that originates from the plaintext storage of sensitive information in memory...

Hewlett Packard Enterprise ClearPass Policy Manager 安全漏洞

Hewlett Packard Enterprise ClearPass Policy Manager is a wireless network security access management system from Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise ClearPass Policy Manager that originated from allowing an attacker with administrative...

Hewlett Packard Enterprise ClearPass Policy Manager 安全漏洞

Hewlett Packard Enterprise ClearPass Policy Manager is a wireless network security access management system from Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise ClearPass Policy Manager that originated from allowing an attacker with administrative...

PT-2024-5324 · Ibm · Ibm Datacap Navigator

Name of the Vulnerable Software and Affected Versions: IBM Datacap Navigator versions 9.1.5 through 9.1.9 Description: The issue is related to the storage of critical information in plain clear text, which can be accessed by a local user. This could allow an attacker to gain unauthorized access t...

Hitachi FOXMAN-UN Security Vulnerability

Hitachi FOXMAN-UN is a powerful toolset in a comprehensive NMS suite from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi FOXMAN-UN and UNEM, which arises from sensitive information being stored in plaintext in a resource that is accessed by another span of control...

Sharp MFP Security Vulnerability

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that originates from storing sensitive information in plaintext in resources that may be accessed by other spheres of control...

Sensitive Information Disclosure

directus is vulnerable to an Sensitive Information Disclosure. The vulnerability is due to inadequate filtering of hashed data when using the alias API, allowing users to retrieve sensitive information in plaintext that is normally redacted...

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A plaintext transfer of sensitive information vulnerability exists in Dell PowerScale OneFS, which can be exploited by attackers to cause an escalation of...

Dell Grab 日志信息泄露漏洞

Dell Grab is a configuration technology from Dell, Inc. It is used to collect data on hosts connected to Dell EMC storage devices. A log information disclosure vulnerability exists in Dell Grab 5.0.4 and prior versions, which stems from the appsync module containing sensitive information stored i...

Cisco Duo Security Vulnerability

Cisco Duo is a fully managed solution from Cisco, Inc. providing secure access to your applications and data. A security vulnerability exists in Cisco Duo that stems from a flaw in the logging component that could allow an authenticated, local attacker to view sensitive information in plaintext o...

Mars: sensitive data-creds for database - private key

The sensitive database credentials, including a username, password, and a private key, were discovered in a publicly accessible GitHub repository. The credentials were stored in plaintext within a configuration file, exposing them to anyone who could access the repository...

CVE-2023-29064

The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include tokens and passwords for administrative accounts...

Siemens Comos 安全漏洞

COMOS is a unified data platform for collaborative plant design, operations and management that supports the collection, processing, preservation and distribution of information throughout the plant lifecycle. A plaintext transfer of sensitive information vulnerability exists in Siemens COMOS. Th...

IBM Security Verify Information Queue 安全漏洞

IBM Security Verify Information Queue is an integration product from International Business Machines IBM. utilizes Kafka technology and a publish/subscribe model to integrate data between IBM Security products. A security vulnerability exists in IBM Security Verify Information Queue versions 10.0...

Fujitsu Software Infrastructure Manager Security Vulnerability

Fujitsu Software Infrastructure Manager is an infrastructure manager from Fujitsu Japan. A security vulnerability exists in Fujitsu Software Infrastructure Manager, which arises from sensitive information being stored in plaintext in product maintenance data ismsnap...

F5 Networks BIG-IP : SSL 3.0/TLS 1.0 vulnerability (K13400)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the K13400 advisory. - The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozil...

Fortinet FortiOS和FortiAuthenticator 安全漏洞

Fortinet FortiOS and Fortinet FortiAuthenticator are both products of Fortinet, Inc. Fortinet FortiOS is a security operating system dedicated to the FortiGate network security platform. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web...

Cisco Duo 安全漏洞

Cisco Duo is a fully managed solution from Cisco, Inc. providing secure access to your applications and data. A security vulnerability exists in Cisco Duo that stems from a flaw in the logging component of the authentication agent that could allow an authenticated, remote attacker to view sensiti...

CVE-2023-30602

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

Design/Logic Flaw

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...