CVE-2023-36672

An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the operating system such that traffic to the local network is sent in plaintext outside the VPN tunnel even if the local network is using a non-RFC1918 IP subnet. This allows an...

CVE-2023-36673

CVE-2023-36673 pertains to Avira Phantom VPN for macOS (versions up to 2.23.1). The issue: the VPN client configures the OS such that all IP traffic to the VPN server’s IP is sent in plaintext outside the VPN tunnel, even if not generated by the VPN client, and DNS lookups for the VPN server’s IP...

Class Scheduling System Security Vulnerability

Class Scheduling System is a class scheduling system by jkev individual developers. A security vulnerability exists in PHPJabbers Class Scheduling System version 1.0, which stems from a lack of password encryption when editing a user account updating a user's page, which allows an attacker to...

Fujitsu Software Infrastructure Manager Security Vulnerability

Fujitsu Software Infrastructure Manager is an infrastructure manager from Fujitsu Japan. A security vulnerability exists in Fujitsu Software Infrastructure Manager prior to version 2.8.0.061, which stems from the ismsnap component collecting and storing authorization credentials in plaintext. A...

CVE-2023-0525

Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions...

Fujitsu Software Infrastructure Manager Security Vulnerability

Fujitsu Software Infrastructure Manager is an infrastructure manager from Fujitsu Japan. A security vulnerability exists in Fujitsu Software Infrastructure Manager, which arises from sensitive information being stored in plaintext in product maintenance data ismsnap...

Connected IO Security Vulnerability

Connected IO is a leading hardware, software and cloud-based IoT and machine-to-machine solution from US-based Connected IO, Inc. A security vulnerability previously existed in Connected IO version v2.1.0 that stemmed from saving passwords and credentials in plaintext format...

SUSE SLES15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2023:3179-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3179-1 advisory. - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out...

CVE-2023-0525

Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions...

CVE-2023-0525

Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions...

CVE-2023-39144

Element55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext...

CVE-2023-39144

Element55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext...

CVE-2023-39144

Element55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext...

Code injection

Element55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext...

CVE-2023-39144

CVE-2023-39144 affects Element55 KnowMore appliances 21 and older; multiple sources corroborate that passwords are stored in plaintext, constituting a confidentiality risk (NVD score CVSS 3.1: HIGH, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Connected docs consistently reference the same vulnerability...

Cloudflare WARP Security Vulnerability

Cloudflare WARP Cloudflare Vpn is a client application for secure connections from Cloudflare, Inc. in the United States. A security vulnerability exists in Cloudflare WARP client versions prior to 2023.7.160.0, which stems from the use of plaintext transmission for DNS requests in the WARP clien...

Element55 KnowMore Security Breach

Element55 KnowMore is a capture application from Element55, Inc. A security vulnerability exists in Element55 KnowMore 21 and prior versions that stems from storing passwords in plaintext...

CVE-2023-39144

Element55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext...

CVE-2023-39144

Element55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext...

Moxa IKS, EDS Plaintext Storage of a Password (CVE-2019-6518)

Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...