Netgear DGN2200 Information Disclosure Vulnerability

NETGEAR DGN2200 is a wireless router product from NETGEAR. An information disclosure vulnerability exists in the BSWcxttongr.htm page in the Netgear DGN2200 DGN2200-V1.0.0.507.0.50 version and DGND3700 DGND3700-V1.0.0.171.0.17 version. A remote attacker can exploit this vulnerability to gain...

CVE-2018-8851

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface...

CVE-2018-8851

CVE-2018-8851 affects Echelon SmartServer 1, SmartServer 2 (before 4.11.007), i.LON 100, and i.LON 600. The root cause is unprotected storage of credentials: passwords are stored in plaintext in configuration files, enabling an attacker with access to the config to log into the SmartServer web UI...

Design/Logic Flaw

The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.conf file which is owned by root but read by local user. Any local user who has access to system running skyring service will be able to get password in plai...

Schneider Electric Pelco Sarix Professional 1st generation cameras authentication password disclosure vulnerability

Schneider Electric Pelco Sarix Professional 1st generation cameras is an IP camera device from Schneider Electric France. A security vulnerability exists in Schneider Electric Pelco Sarix Professional 1st generation cameras using firmware versions prior to 3.29.69. The vulnerability can be...

Security Bulletin: Password displayed in plaintext in logs (CVE-2014-0920)

Summary IBM SPSS Analytic Server jobs produce logs that contain a password in plaintext which authenticated users can view. Vulnerability Details CVEID: CVE-2014-0920 DESCRIPTION: IBM SPSS Analytic Server jobs produce logs that contain a password in plaintext which authenticated users can view...

Security Bulletin: IBM Capacity Management Analytics is affected by a plaintext password vulnerability (CVE-2015-7433)

Summary IBM Capacity Management Analytics could allow a local user on the CMA install machine to obtain other CMA user's usernames and passwords in plaintext during the CMA install. Vulnerability Details CVEID: CVE-2015-7433 DESCRIPTION: IBM Capacity Management Analytics could allow a local user ...

Microsoft Windows: MS Security Guide: WDigest Authentication

When WDigest authentication is enabled, Lsass.exe retains a copy of the user SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-7510

In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords are presented in plaintext in a file that is accessible without authentication...

CVE-2018-7510

BeaconMedaes TotalAlert Scroll Medical Air Systems web application versions older than 4107600010.23 store passwords in plaintext in a file accessible without authentication (CWE-256). This CVE entry corresponds to Unprotected Storage of Credentials (CVE-2018-7510). Affected product: TotalAlert S...

CVE-2017-7933

CVE-2017-7933 affects ABB IP Gateway versions 3.39 and earlier. The vulnerability arises from passwords stored in plain-text in configuration files, enabling an attacker to gain unauthorized access over the network. The issue is categorized under unprotected storage of credentials (CWE-256) and i...

Joomla! Core Information Disclosure Vulnerability (CNVD-2018-15240)

Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. A trust management vulnerability exists in Joomla! Core versions prior to 3.8.8, which stems from the web installation application...

CVE-2018-11325

An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen...

CVE-2018-11325

CVE-2018-11325 affects Joomla! Core prior to 3.8.8. The issue is that the web install application would autofill and display the administrator password in plaintext on the confirmation screen after a form validation error or returning to a previous install step. Connected documents corroborate th...

CVE-2018-1240

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...

Sophos Endpoint Protection Plaintext Password Disclosure Vulnerability

Sophos Endpoint Protection helps protect your workstation by adding prevention, detection and response technologies to your operating system. A plaintext password disclosure vulnerability exists in Sophos Endpoint Protection 10.7. The vulnerability arises because Sophos Endpoint Protection uses...

CVE-2017-0925

Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password...

CVE-2017-0925

Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password...

CVE-2017-0925

Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password...

UBUNTU-CVE-2017-0925

Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password...