8839 matches found
CVE-2023-51740
CVE-2023-51740 affects Skyworth Router CM5100, version 4.1.1.24. The vulnerability arises from transmitting authentication credentials in plaintext over the network, enabling a remote attacker to eavesdrop network traffic and extract the username and password from the router’s web interface (Logi...
PT-2024-14279 · Skyworth · Skyworth Router Cm5100
Name of the Vulnerable Software and Affected Versions: Skyworth Router CM5100 version 4.1.1.24 Description: This issue exists due to the transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this by eavesdropping on the victim’s network traffic ...
CVE-2024-0556
CVE-2024-0556 describes a weakness in the WIC200 system (version 1.1) where weak cryptography for passwords can allow a remote attacker to intercept traffic and retrieve credentials from another user. The attack enables decoding credentials in Base64, exposing plaintext credentials. The vulnerabi...
Rapid Software Rapid SCADA Security Vulnerability
Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA 5.8.4 and earlier versions that stems from storing plaintext credentials in a different location, which allows an attacker with local acce...
PT-2024-1447 · Unknown · Rapid Scada
Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to the storage of passwords in plaintext. This may allow an attacker with local access to obtain unauthorized access to protected information. Recommendations: For versions...
PT-2024-1658 · Mbed Tls +3 · Mbed Tls +3
Name of the Vulnerable Software and Affected Versions: Mbed TLS versions 2.x before 2.28.7 Mbed TLS versions 3.x before 3.5.2 Description: A timing side channel in RSA private operations could allow a local attacker to recover the plaintext by sending a large number of messages for decryption, as...
Information Disclosure
github.com/cubefs/cubefs is vulnerable to Information Exposure. The vulnerability is due to CubeFS leaking configuration keys in plaintext logs. This allow the attacker to read sensitive data from the logs and allow anyone to carry out operations on blobs...
CVE-2023-46741
CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow users to read sensitive data from the logs which could allow them escalate privileges. CubeFS leaks configuration keys in plaintext format in the logs. These keys...
CVE-2023-46741 CubeFS leaks magic secret key when starting Blobstore access service
CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow users to read sensitive data from the logs which could allow them escalate privileges. CubeFS leaks configuration keys in plaintext format in the logs. These keys...
CVE-2023-46741
CubeFS (open-source cloud-native file storage) has a vulnerability in versions prior to 3.3.1 where secrets/configuration keys are leaked in plaintext logs. The root cause is logging sensitive keys, enabling an attacker to read keys and perform operations on blobs they should not have permission ...
GHSA-8H2X-GR2C-C275 CubeFS leaks magic secret key when starting Blobstore access service
A vulnerability was found in CubeFS that could allow users to read sensitive data from the logs which could allow them escalate privileges. CubeFS leaks configuration keys in plaintext format in the logs. These keys could allow anyone to carry out operations on blobs that they otherwise do not ha...
CubeFS Security Vulnerability
CubeFS is a cloud-native file storage for CubeFS individual developers. A security vulnerability exists in CubeFS versions prior to 3.3.1, which stems from leaking configuration keys in plaintext format in logs. An attacker exploited the vulnerability to read sensitive data from logs to escalate...
Genie Aladdin Connect Mobile Application Security Vulnerability
Genie Aladdin Connect Mobile Application is a garage door opener control software from Genie. A security vulnerability exists in Genie Aladdin Connect Mobile Application 5.65 Build 2075 and prior versions, which stems from the fact that a user's product account authentication data is stored in...
Sesami Cash Point & Transport Optimizer Security Vulnerability
Sesami Cash Point & Transport Optimizer is a solution from Sesami Corporation. A security vulnerability exists in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 that stems from the presence of an unknown issue. Allows a remote attacker to obtain sensitive information by transmitting...
CVE-2023-34829
Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext...
CVE-2023-34829
Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext...
Improper access control
Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext...
CVE-2023-34829
CVE-2023-34829 affects TP-Link Tapo prior to v3.1.315. The issue is incorrect access control that allows an attacker to obtain user credentials in plaintext, exposing confidentiality (base score 6.5, MEDIUM). The vulnerability impacts authentication/credential handling and is supported by multipl...
