836 matches found
CVE-2018-7510
BeaconMedaes TotalAlert Scroll Medical Air Systems web application versions older than 4107600010.23 store passwords in plaintext in a file accessible without authentication (CWE-256). This CVE entry corresponds to Unprotected Storage of Credentials (CVE-2018-7510). Affected product: TotalAlert S...
Joomla! Core Information Disclosure Vulnerability (CNVD-2018-15240)
Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. A trust management vulnerability exists in Joomla! Core versions prior to 3.8.8, which stems from the web installation application...
CVE-2018-11325
An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen...
CVE-2018-11325
CVE-2018-11325 affects Joomla! Core prior to 3.8.8. The issue is that the web install application would autofill and display the administrator password in plaintext on the confirmation screen after a form validation error or returning to a previous install step. Connected documents corroborate th...
CVE-2018-1240
Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...
Sophos Endpoint Protection Plaintext Password Disclosure Vulnerability
Sophos Endpoint Protection helps protect your workstation by adding prevention, detection and response technologies to your operating system. A plaintext password disclosure vulnerability exists in Sophos Endpoint Protection 10.7. The vulnerability arises because Sophos Endpoint Protection uses...
CVE-2017-0925
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password...
CVE-2017-0925
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password...
UBUNTU-CVE-2017-0925
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password...
CVE-2017-0925
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password...
CVE-2017-0925
GitLab Enterprise Edition 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint, leading to disclosure of plaintext passwords. The connected sources confirm the affected product and the root cause (inadequate credential protection in ...
CVE-2017-0925
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password...
CVE-2017-0925
Removed by vendor...
Information Disclosure
maven-scm-api is vulnerable to information disclosure attacks. If a git push command failed, the password is printed in plaintext to the logs...
WebLog Expert Web Server Authentication Bypass Vulnerability
WebLog Expert is a web server log analysis software. An authentication bypass vulnerability exists in WebLog Expert Web Server version 9.4, which can be exploited by an attacker to set a plaintext password and log in as an administrator...
Atmail 7.1.1 PRO Cross Site Scripting
============================================================================ | Title : Atmail v7.1.1 PRO XSS Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | | Version : v7.1.1 | | Vendor : www.p30vel.ir | | Dork : Powered by...
CVE-2017-2723
The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system could forge the Safe to read users' plaintext Safe passwords, leading to information leak...
CVE-2016-0872
A Plaintext Storage of a Password issue was discovered in Kabona AB WebDatorCentral WDC versions prior to Version 3.4.0. WDC stores password credentials in plaintext...