11012 matches found
SUSE CVE-2024-56362
Navidrome is an open source web-based music collection server and streamer. Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice introduces a security risk because anyone with access to the database file can retrieve the secret. Th...
CVE-2024-43659: Plaintext Storage of a Password
After gaining access to the firmware of a charging station, a file at can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue affects Iocharger firmware for AC models before firmware version 25010801. The issue is addressed by requirin...
CVE-2025-21111
Dell VxRail, versions 8.0.000 through 8.0.311, contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2025-21111
Dell VxRail, versions 8.0.000 through 8.0.311, contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2025-21111
Dell VxRail, versions 8.0.000 through 8.0.311, contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2025-21111
Dell VxRail releases 8.0.000–8.0.311 are affected by a plaintext storage of a password vulnerability. A high-privilege attacker with local access could exposure confidential information. Impact: information exposure. A Dell security update (KB referenced) and upgrading to a version containing the...
CVE-2025-21102
Dell VxRail, versions 7.0.000 through 7.0.532, contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2025-21102
Dell VxRail CVE-2025-21102 affects versions 7.0.000 through 7.0.532. The issue is plaintext storage of a password, allowing a high-privileged attacker with local access to potentially expose sensitive data. The PT-2025-4192 entry recommends disabling local access for high-privileged users until a...
CVE-2025-21102
Dell VxRail, versions 7.0.000 through 7.0.532, contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
Dell VxRail security vulnerabilities
Dell VxRail is a hyper-converged infrastructure HCI solution jointly designed by Dell Technologies and VMware, optimized for VMware workloads for virtualized applications, cloud computing and hybrid cloud management. Dell VxRail suffers from a plaintext storage password vulnerability that could b...
PT-2025-1065 · Dell · Dell Vxrail
Name of the Vulnerable Software and Affected Versions: Dell VxRail versions 8.0.000 through 8.0.311 Description: The issue is related to the storage of critical information in plaintext, which could allow an attacker to expose protected information. A high-privileged attacker with local access...
PT-2025-4192 · Dell · Dell Vxrail
Name of the Vulnerable Software and Affected Versions: Dell VxRail versions 7.0.000 through 7.0.532 Description: The issue concerns a plaintext storage of a password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information...
Dell VxRail security vulnerabilities
Dell VxRail is a hyper-converged infrastructure HCI solution jointly designed by Dell Technologies and VMware, optimized for VMware workloads for virtualized applications, cloud computing and hybrid cloud management. Dell VxRail suffers from a plaintext storage password vulnerability that could b...
CVE-2025-21111: Plaintext Storage of a Password
Dell VxRail, versions 8.0.000 through 8.0.311, contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2025-21102: Plaintext Storage of a Password
Dell VxRail, versions 7.0.000 through 7.0.532, contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
GO-2024-3357 Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome
Navidrome Stores JWT Secret in Plaintext in navidrome.db in github.com/navidrome/navidrome...
OpenVPN Connect security vulnerability
OpenVPN Connect is a VPN Virtual Private Network client application from OpenVPN USA. A security vulnerability exists in OpenVPN Connect versions prior to 3.5.0, which stems from a plaintext private key in the configuration file being recorded in the application logs, which can be used by...
Sensitive Information Disclosure
Navidrome is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of sensitive information because the JWT secret is stored in plaintext in the navidrome.db database file, making it retrievable by anyone with access to the database...
IBM Storage Defender Plaintext Transfer Vulnerability
IBM Storage Defender is a solution from International Business Machines IBM that provides end-to-end data resiliency. A plaintext transfer vulnerability exists in IBM Storage Defender versions 2.0.0 through 2.0.9, which stems from the presence of keys stored in plaintext and can be exploited by a...
BIT-KAFKA-2024-56128 Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption
Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation. Issue Summary: Apache Kafka's implementation of the Salted Challenge Response Authentication Mechanism SCRAM did not fully adhere to the requirements of RFC 5802 1. Specifically, as per RFC 5802, the serv...