ALSA-2024:10591 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message CVE-2024-11159 firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims CVE-2024-11694 firefox: thunderbird: Unhandled...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message CVE-2024-11159 firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims CVE-2024-11694 firefox: thunderbird: Unhandled...

CVE-2024-11982

Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers with administrator privileges can access the user settings page to retrieve plaintext passwords...

CVE-2024-11982

CVE-2024-11982 affects Billion Electric router models (CNNVD lists M100, M150, M120N, M500). Weakness: plaintext storage of passwords in user settings, allowing remote attackers with administrator privileges to view passwords. Root cause per sources is insecure password handling exposing plaintex...

CVE-2024-11982 Billion Electric router - Plaintext Storage of a Password

Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers with administrator privileges can access the user settings page to retrieve plaintext passwords...

CVE-2024-11982 Billion Electric router - Plaintext Storage of a Password

Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers with administrator privileges can access the user settings page to retrieve plaintext passwords...

PT-2024-8937 · Billion Electric · Billion Electric Routers

Name of the Vulnerable Software and Affected Versions: Billion Electric routers affected versions not specified Description: The issue concerns a plaintext storage of password vulnerability. Remote attackers with administrator privileges can access the user settings page to retrieve passwords in...

zhmcclient security vulnerability

zhmcclient is a server interface to the zhmcclient open source. A security vulnerability exists in zhmcclient that stems from the fact that under certain circumstances, zhmcclient writes password-like attributes in plaintext to its HMC and API logs...

zhmc-ansible-modules security vulnerability

zhmc-ansible-modules is an Ansible collection for IBM Z HMC open sourced by zhmcclient. A security vulnerability exists in zhmc-ansible-modules, which stems from the fact that under certain circumstances, ibm.ibmzhmc writes password-like attributes in plaintext to its log files and to the output...

CVE-2024-11982: Plaintext Storage of a Password

Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers with administrator privileges can access the user settings page to retrieve plaintext passwords...

Billion Electric’s various products have security vulnerabilities

Billion Electric M100 and others are a wireless router from China-based Shengda Electric Billion Electric. A security vulnerability exists in various Billion Electric products, which stems from storing passwords in plaintext, allowing a remote attacker with administrator privileges to access the...

UBUNTU-CVE-2024-36464

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

CVE-2024-36464 Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

CVE-2024-36464

CVE-2024-36464 affects Zabbix media-types export: passwords are exported in YAML in plain text. The description in the CVE notes this is a best-practices type issue with likely limited impact, since only users who can access media types can view the passwords. Connected documents corroborate this...

CVE-2024-36464: Plaintext Storage of a Password

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

CVE-2024-49351

IBM Workload Scheduler 9.5, 10.1, and 10.2 stores user credentials in plain text which can be read by a local user...

CVE-2024-49351: Plaintext Storage of a Password

IBM Workload Scheduler 9.5, 10.1, and 10.2 stores user credentials in plain text which can be read by a local user...

CVE-2024-29978: Plaintext Storage of a Password

User passwords are decrypted and stored on memory before any user logged in. Those decrypted passwords can be retrieved from the coredump file. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under...

Security Bulletin: IBM Workload Scheduler stores user credentials in plain text.

Summary IBM Workload Scheduler stores user credentials in plain text which can be read by a local user. CVE-2024-49351 Vulnerability Details CVEID:CVE-2024-49351 DESCRIPTION: IBM Workload Scheduler stores user credentials in plain text which can be read by a local user. CWE:CWE-256: Plaintext...

CVE-2024-53253

Sentry is an error tracking and performance monitoring platform. Version 24.11.0, and only version 24.11.0, is vulnerable to a scenario where a specific error message generated by the Sentry platform could include a plaintext Client ID and Client Secret for an application integration. The Client ...