Apache Airflow Encryption Problem Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A security vulnerability exists in Apache Airflow versions prior to 1.10.13, which...

IBM HTTP Server 8.5.0.0 <= 8.5.5.5 / 8.0.0.0 <= 8.0.0.10 / 7.0.0.0 <= 7.0.0.37 Information Disclosure (260001)

The version of IBM HTTP Server running on the remote host is affected by a vulnerability. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct...

PYSEC-2020-262

In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field...

Apache Airflow 加密问题漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A security vulnerability exists in Apache Airflow versions prior to 1.10.13, which...

Insufficient Information

chromium is vulnerable to insufficient Information.The vulnerability exists due to LDAP password credential are stored in plaintext. which allows to remote attacker to bypass navigation restrictions via a crafted HTML page...

Nextcloud Server 19.0.1 Encryption Vulnerability (NC-SA-2020-039)

Nextcloud Server is prone to a vulnerability where it is possible to downgrade the encryption scheme and break the integrity through known-plaintext attack. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Red Hat Wildfly 日志信息泄露漏洞

Red Hat Wildfly is the United States Red Hat Red Hat, Inc. of a lightweight JavaEE-based open source application server . An information disclosure vulnerability exists in versions prior to WildFly 21.0.0, which stems from a resource adapter logging plain-text JMS passwords at the warning level a...

CVE-2020-24227

Playground Sessions v2.5.582 and earlier for Windows stores user credentials in plain text, enabling anyone with access to UserProfiles.sol to extract email and password. Affected component/file: UserProfiles.sol within the Windows build. Root cause: credentials stored in cleartext rather than us...

Selected Red Hat Products Security Vulnerabilities

Red Hat Ceph Storage is a scalable, open software-defined storage platform. Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform. Container Platform is an application platform that enables organizations to develop, deploy and manage existing container-based applications acro...

Playground Sessions Information Disclosure Vulnerability

GraphQL Playground is a graphical, interactive, in-browser GraphQL IDE Integrated Development Environment based on GraphiQL from Prisma Labs, Germany. A security vulnerability exists in Playground Sessions version v2.5.582 and prior versions, which stems from storing user credentials in plaintext...

TYPO3 Encryption Problem Vulnerability (CNVD-2020-66591)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Typo3 Association. Typo3 is vulnerable to a cryptographic issue that stems from storing user session identifiers in plaintext. The vulnerability can be exploited in combination with other issues to...

Aviatrix Controller Encryption Key Plaintext Storage Vulnerability

Aviatrix Controller is a centralized control panel for orchestrating and managing various network and connectivity solutions. An encryption key plaintext storage vulnerability exists in Aviatrix Controller versions prior to R5.3.1151. An attacker can exploit this vulnerability to obtain plaintext...

TYPO3 加密问题漏洞

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Typo3 Association. Typo3 is vulnerable to a cryptographic issue that stems from storing user session identifiers in plaintext. The vulnerability can be exploited in combination with other issues to...

Basetech Ge-131 Bt-1837836 Security Vulnerability

Basetech Ge-131 Bt-1837836 is a webcam from Basetech. A security vulnerability exists in BASETech GE-131 BT-1837836 firmware 20180921, which stems from the presence of a plaintext transmission of sensitive information vulnerability that could disclose sensitive information transmitted between a...

Aviatrix Systems Controller 安全漏洞

Aviatrix Controller is a centralized control panel for orchestrating and managing various network and connectivity solutions. An encryption key plaintext storage vulnerability exists in Aviatrix Controller versions prior to R5.3.1151. An attacker can exploit this vulnerability to obtain plaintext...

PostgreSQL Resource Management Error Vulnerability

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. A resource management error vulnerability exists in the PostgreSQL product that stems from if security-related parameters are dropped, an attacker could use this vulnerability to complete a MITM...

Palo Alto Networks PAN-OS Log Message Disclosure Vulnerability (CNVD-2020-63187)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. Palo Alto Networks PAN-OS suffers from a log message disclosure vulnerability that stems from the fact that a proxy server's password may be displayed in plaintext when using the CLI,...

CVE-2020-5426

Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. This also depended on the configuration of the MySQL server which is used to cache a UAA client token used by the service. If intercepted the token can give ...

CVE-2020-5426

Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. This also depended on the configuration of the MySQL server which is used to cache a UAA client token used by the service. If intercepted the token can give ...

Default configuration

Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. This also depended on the configuration of the MySQL server which is used to cache a UAA client token used by the service. If intercepted the token can give ...