Lucene search
+L

8815 matches found

RedhatCVE
RedhatCVE
added 2025/09/12 12:20 a.m.20 views

CVE-2025-55976

Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. Any unauthenticated user on the local network can directly obtain the Wi-Fi network password by querying this endpoint...

8.4CVSS6.9AI score0.03166EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/09/12 12:0 a.m.12 views

PT-2025-37299

Name of the Vulnerable Software and Affected Versions: Digiever NVR affected versions not specified Description: Digiever NVR devices are susceptible to a sensitive information exposure issue. Unauthenticated remote attackers can access the system configuration file and obtain plaintext credentia...

10CVSS6.2AI score0.00483EPSS
SaveExploits0References12
OSV
OSV
added 2025/09/10 6:15 p.m.8 views

CVE-2025-55976

Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. Any unauthenticated user on the local network can directly obtain the Wi-Fi network password by querying this endpoint...

8.4CVSS5.8AI score0.03166EPSS
SaveExploits1References2
NVD
NVD
added 2025/09/10 6:15 p.m.26 views

CVE-2025-55976

Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. Any unauthenticated user on the local network can directly obtain the Wi-Fi network password by querying this endpoint...

8.4CVSS0.03166EPSS
SaveExploits1References2
NVD
NVD
added 2025/09/10 4:15 p.m.8 views

CVE-2025-43938

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to...

5CVSS0.00112EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/10 4:15 p.m.7 views

CVE-2025-43938

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to...

4.4CVSS5.8AI score0.00112EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/10 4:3 p.m.4 views

CVE-2025-43938

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to...

5CVSS5.7AI score0.00112EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/10 4:3 p.m.23 views

CVE-2025-43938

CVE-2025-43938 affects Dell PowerProtect Data Manager (PPDM) running on Hyper-V for versions 19.19 and 19.20 . The issue is described as plaintext storage of a password , enabling a high-privilege, local attacker to disclose credentials and potentially gain unauthorized access with the compromise...

5CVSS5.7AI score0.00112EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/09/10 4:3 p.m.12 views

CVE-2025-43938

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to...

5CVSS0.00112EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/10 1:15 p.m.8 views

CVE-2025-10227

Missing Encryption of Sensitive Data CWE-311 in the Object Archive component in AxxonSoft Axxon One C-Werk before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at...

5.1CVSS0.00076EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/10 1:15 p.m.9 views

CVE-2025-10227

Missing Encryption of Sensitive Data CWE-311 in the Object Archive component in AxxonSoft Axxon One C-Werk before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at...

4.6CVSS5.4AI score0.00076EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/10 1:15 p.m.8 views

CVE-2025-10221

Insertion of Sensitive Information into Log File CWE-532 in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords...

6.7CVSS5.5AI score0.00129EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/10 1:15 p.m.11 views

CVE-2025-10221

Insertion of Sensitive Information into Log File CWE-532 in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords...

6.7CVSS0.00129EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/10 12:39 p.m.6 views

CVE-2025-10227 Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8

Missing Encryption of Sensitive Data CWE-311 in the Object Archive component in AxxonSoft Axxon One C-Werk before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at...

5.1CVSS5.9AI score0.00076EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/10 12:39 p.m.19 views

CVE-2025-10227 Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8

Missing Encryption of Sensitive Data CWE-311 in the Object Archive component in AxxonSoft Axxon One C-Werk before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at...

5.1CVSS0.00076EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/10 12:31 p.m.6 views

CVE-2025-10221 Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs

Insertion of Sensitive Information into Log File CWE-532 in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords...

6.7CVSS6.1AI score0.00129EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/10 12:31 p.m.16 views

CVE-2025-10221 Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs

Insertion of Sensitive Information into Log File CWE-532 in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords...

6.7CVSS0.00129EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/10 12:0 a.m.16 views

PT-2025-37079

Name of the Vulnerable Software and Affected Versions: Intelbras IWR 3000N version 1.9.8 Description: The Intelbras IWR 3000N version 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. An unauthenticated user on the local network can obtain the Wi-Fi network password by...

8.4CVSS6.5AI score0.03166EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2022-0555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions CVE-2022-0555 Note that Nessus relies on the presence of the package as reporte...

8.4CVSS5.5AI score0.00283EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/09/10 12:0 a.m.8 views

PT-2025-37071

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.19 and 19.20 Description: Dell PowerProtect Data Manager, running on Hyper-V, contains a vulnerability related to the plaintext storage of passwords. A high-privileged attacker with local access coul...

5CVSS6AI score0.00112EPSS
SaveExploits0References4
Rows per page
Query Builder