PT-2024-39028 · Planet Technology · Planet Technology Switch

Name of the Vulnerable Software and Affected Versions: PLANET Technology switch models affected versions not specified Description: The issue concerns certain switch models from PLANET Technology that store SNMPv3 users' passwords in plaintext within the configuration files. This allows remote...

PLANET switch devices security vulnerabilities

PLANET switch devices are a series of switch devices from PLANET China. A security vulnerability exists in PLANET switch devices that stems from the fact that the SNMPv3 service only supports outdated authentication protocols and encryption protocols, allowing an attacker to potentially obtain...

PT-2024-39025 · Planet Technology · Planet Technology Devices

Name of the Vulnerable Software and Affected Versions: PLANET Technology devices affected versions not specified Description: The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with thi...

PT-2024-39022 · Planet Technology · Planet Technology Switch

Name of the Vulnerable Software and Affected Versions: PLANET Technology switch models affected versions not specified Description: The issue concerns the use of obsolete algorithms for authentication and encryption protocols in the SNMPv3 service, potentially allowing attackers to obtain plainte...

MOXA MXview One Series security vulnerabilities

MOXA MXview One Series is a series of network management software from China-based MOXA. A security vulnerability exists in MOXA MXview One Series that originates from storing credentials in plaintext...

Kastle Access Control System security vulnerabilities

Kastle Access Control System is an access control system from Kastle USA. A security vulnerability exists in Kastle Access Control System versions prior to 20240501 that stems from storing machine credentials in plaintext, which allows an attacker to access sensitive information...

CVE-2024-8777

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

CVE-2024-8777

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

CVE-2024-8777

CVE-2024-8777 concerns OMFLOW from The SYSCOM Group, where an information leakage vulnerability could allow unauthorized remote attackers to read arbitrary system configurations. The issue may be exposed via network access with low attack complexity and no privileges required, with the impact on ...

CVE-2024-8777 The SYSCOM Group OMFLOW - Information Leakage

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

CVE-2024-8777 The SYSCOM Group OMFLOW - Information Leakage

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

CVE-2024-8777: Exposure of Sensitive Information to an Unauthorized Actor

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

PT-2024-39243 · Syscom · Omflow

Name of the Vulnerable Software and Affected Versions: OMFLOW from The SYSCOM Group affected versions not specified Description: The issue allows unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...

CVE-2024-41629

An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plaintext storage of credentials...

No-IP Dynamic Update Client security vulnerability

No-IP Dynamic Update Client is a dynamic update software from No-IP. A security vulnerability exists in No-IP Dynamic Update Client version v3.x that originates from the use of plaintext credentials that may appear on the command line or in a file...

VICIdial 2.14-917a SQL Injection Vulnerability

An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial version 2.14-917a to enumerate database records. By default, VICIdial stores plaintext credentials within the database. Title: VICIdial Unauthenticated SQL Injection Publication URL:...

Palo Alto Networks Cortex Xsoar security vulnerability

Palo Alto Networks Cortex Xsoar is a Security Orchestration Automation and Response Soar platform from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Cortex Xsoar that stems from an ActiveMQ integration issue that could result in configured ActiveMQ credentials bei...

CVE-2024-8503

An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database...

CVE-2024-8503

An unauthenticated attacker can exploit a time-based SQL injection vulnerability in VICIdial to enumerate database records. The vulnerability resides in the VERM_AJAX_functions.php script, where a crafted Basic Auth username value can reach vulnerable query logic. Because VICIdial stores credenti...

CVE-2024-8503 VICIdial Unauthenticated SQL Injection

An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database...