8839 matches found
Design/Logic Flaw
Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their...
CVE-2023-45151 OAuth2 client_secret stored in plain text in the Nextcloud database
Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their...
CVE-2023-45151 OAuth2 client_secret stored in plain text in the Nextcloud database
Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their...
CVE-2023-45151
CVE-2023-45151 affects Nextcloud Server where OAuth2 tokens were stored in plaintext on affected installations. The root cause is storage of OAuth2 tokens in plaintext on the server, enabling an attacker with server access to potentially elevate privileges. Affected versions were addressed by upg...
CVE-2023-45151 OAuth2 client_secret stored in plain text in the Nextcloud database
Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their...
PT-2023-6441 · Nextcloud +2 · Nextcloud +2
Name of the Vulnerable Software and Affected Versions: Nextcloud versions prior to 25.0.8 Nextcloud versions prior to 26.0.3 Nextcloud versions prior to 27.0.1 Description: The issue is related to the storage of OAuth2 tokens in plaintext in Nextcloud, allowing an attacker who has gained access t...
PT-2023-6568 · Unknown · Eisbaer Scada
Name of the Vulnerable Software and Affected Versions: EisBaer Scada affected versions not specified Description: The issue is related to the storage of passwords in plaintext, which could allow an attacker to disclose protected information and compromise the system. Recommendations: At the momen...
urllib3 Input Validation Error Vulnerability
urllib3 is a Python HTTP library. It features thread-safe connection pooling, file publishing support, and more. A security vulnerability exists in urllib3 versions prior to 1.24.2, which stems from a vulnerability that allows an attacker to obtain credentials in an authorization header or transm...
F5 Networks BIG-IP : BIG-IP DNS TSIG Key Leakage (K98334513)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.0 / 16.1.4 / 15.1.9. It is, therefore, affected by a vulnerability as referenced in the K98334513 advisory. When a BIG-IP DNS or BIG-IP LTM system is enabled with the DNS Services license, and a TSIG key is created, t...
CVE-2023-27315
SnapGathers versions prior to 4.9 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext domain user credentials...
CVE-2023-27315
SnapGathers versions prior to 4.9 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext domain user credentials...
CVE-2023-27315 Information Disclosure Vulnerability in SnapGathers
SnapGathers versions prior to 4.9 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext domain user credentials...
CVE-2023-27315
SnapGathers versions prior to 4.9 are vulnerable to an information-disclosure issue that could allow a local authenticated attacker to discover plaintext domain user credentials. The issue is described in CVE-2023-27315 with a base CVSS around MEDIUM (local access, low attack complexity, high con...
NetApp SnapGathers Security Breach
NetApp SnapGathers is a unified, scalable data protection platform from Network Appliance NetApp. A security vulnerability exists in NetApp SnapGathers versions prior to 4.9, which stems from a vulnerability that allows a locally authenticated attacker to discover plaintext domain user credential...
PT-2023-21063 · Unknown · Snapgathers
Name of the Vulnerable Software and Affected Versions: SnapGathers versions prior to 4.9 Description: The issue allows a local authenticated attacker to discover plaintext domain user credentials. Recommendations: For versions prior to 4.9, update to version 4.9 or later to resolve the issue...
F5 BIG-IP Information Disclosure Vulnerability (CNVD-2023-75596)
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An information disclosure vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to view TSIG keys in...
F5 BIG-IP Sensitive Information Plaintext Storage Vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. F5 BIG-IP suffers from a sensitive information plaintext storage vulnerability that can be exploited by an attacker to gain...
CVE-2023-37935
A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view plaintext passwords of remote services such as RDP or VNC, if the attacker is able to read the GET requests to those services...
CVE-2023-37935
A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view plaintext passwords of remote services such as RDP or VNC, if the attacker is able to read the GET requests to those services...