9000 matches found
CVE-2024-5996
The CVE has a rejection note in the Initial Description, but connected data provides concrete details: Soar Cloud HR Portal is affected. The PT-Security entry PT-2024-37301 reports that notification emails from Soar Cloud HR Portal include links with embedded session data and are sent without enc...
CVE-2024-33375
LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware...
CVE-2024-33375
LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware...
CVE-2024-33375
CVE-2024-33375 affects LB-LINK BL-W1210M v2.0, where credentials are stored in plaintext inside the router firmware. The CVSSv3.1 base score is 9.8 (CRITICAL) with network access, no privileges, and no user interaction required. The issue originates from unencrypted storage of credentials in the ...
The vulnerability of the video bar and switch for Apollo VX20 video conferencing systems lies in the lack of encryption for confidential data and improper handling of exclusive conditions, allowing intruders to obtain passwords in an open form.
The vulnerability of the microprogramming software for Apollo VX20 is related to the absence of encrypted confidential data. Exploiting this vulnerability can allow a malicious actor to obtain passwords in plain text through a GET request to SoftAP/device/config...
CVE-2024-36589
An issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2b2b4 to ba9fd and DecentralizeJustice/anonBackend commit 57837 to cd815 was discovered to store credentials in plaintext...
CVE-2024-36589
An issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2b2b4 to ba9fd and DecentralizeJustice/anonBackend commit 57837 to cd815 was discovered to store credentials in plaintext...
CVE-2024-36589
Summary: CVE-2024-36589 involves storage of credentials in plaintext across multiple components: Annonshop.app (versions 2b2b4–ba9fd), DecentralizeJustice/anonymousLocker (2b2b4–ba9fd), and DecentralizeJustice/anonBackend (57837–cd815). The root cause is plaintext credential storage within the ci...
PT-2024-27086 · Decentralizejustice +1 · Decentralizejustice/Anonbackend +2
Name of the Vulnerable Software and Affected Versions: Annonshop.app versions 2b2b4 through ba9fd DecentralizeJustice/anonymousLocker versions 2b2b4 through ba9fd DecentralizeJustice/anonBackend versions 57837 through cd815 Description: An issue was discovered in the specified commits of...
PT-2024-25222 · Lb Link · Lb-Link Bl-W1210M
Name of the Vulnerable Software and Affected Versions: LB-LINK BL-W1210M version 2.0 Description: The issue concerns the storage of user credentials in plaintext within the router's firmware. This means that sensitive information, such as usernames and passwords, is not encrypted and can be easil...
CVE-2024-36589
An issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2b2b4 to ba9fd and DecentralizeJustice/anonBackend commit 57837 to cd815 was discovered to store credentials in plaintext...
Siemens SINEC Traffic Analyzer Credential Protection Insufficiency Vulnerability
SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. Siemens SINEC Traffic Analyzer suffers from a Credential Protection...
Hitachi FOXMAN-UN Security Vulnerability
Hitachi FOXMAN-UN is a powerful toolset in a comprehensive NMS suite from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi FOXMAN-UN and UNEM, which arises from sensitive information being stored in plaintext in a resource that is accessed by another span of control...
Siemens SINEC Traffic Analyzer 安全漏洞
SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. Siemens SINEC Traffic Analyzer suffers from a Credential Protection...
CVE-2024-36790
Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 was discovered to store credentials in plaintext...
CVE-2024-36790
Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 was discovered to store credentials in plaintext...
CVE-2024-36790
Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 was discovered to store credentials in plaintext...
CVE-2024-36790
Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 was discovered to store credentials in plaintext...
CVE-2024-36790
CVE-2024-36790 applies to Netgear WNR614 (JNR1010V2/N300) with firmware versions 1.1.0.54 and 1.0.1, where credentials are stored in plaintext. The root cause is unencrypted storage of protected information on the device, enabling potential disclosure of credentials. The NVD entry lists a high im...