Lucene search
K

36 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/09 9:18 p.m.4 views

CVE-2026-25889

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change...

5.4CVSS5.5AI score0.00017EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/09 12:0 a.m.3 views

PT-2026-7167

Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.57.1 Description File Browser offers a file management interface for tasks like uploading, deleting, previewing, renaming, and editing files. A flaw in the password validation process, specifically a...

9.9CVSS5AI score0.00733EPSS
Exploits44References122
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-3990

Malware in sbrugna...

8.8CVSS8.8AI score0.00511EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-1748

Malware in sbrugna...

4CVSS6.4AI score0.00176EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-1999-1205

Malware in sbrugna...

3.6CVSS6.4AI score0.00173EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-0441

Malware in sbrugna...

7.5CVSS6.4AI score0.00515EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-19671

Malicious code in bioql PyPI...

6.2CVSS6.3AI score0.00081EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-26002

Malicious code in bioql PyPI...

5.3CVSS5.4AI score0.00365EPSS
Exploits0References1
NVD
NVD
added 2025/06/26 10:15 p.m.3 views

CVE-2025-5731

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

5.5CVSS0.00081EPSS
Exploits0References3
CVE
CVE
added 2025/06/26 9:28 p.m.26 views

CVE-2025-5731

Summary: CVE-2025-5731 affects the Infinispan CLI, where a credential decoded from a Kubernetes secret is handled in plaintext and can appear in a command string, potentially leaking data in an error message when a command is not found. Root cause: insecure processing/embedding of the decoded sec...

5.5CVSS7AI score0.00081EPSS
Exploits0References3Affected Software3
Cvelist
Cvelist
added 2025/06/26 9:28 p.m.6 views

CVE-2025-5731 Infinispan: credential leakage in infinispan cli

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

5.5CVSS0.00081EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/06/26 9:28 p.m.3 views

CVE-2025-5731

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found. Mitigation Currently, no mitigation is available for this...

6.2CVSS7AI score0.00081EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/06/26 12:0 a.m.4 views

PT-2025-27013 · Unknown · Infinispan Cli

Name of the Vulnerable Software and Affected Versions: Infinispan CLI affected versions not specified Description: A flaw was found in Infinispan CLI where a sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext. This password is included in a command stri...

6.2CVSS7AI score0.00081EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/05/23 6:35 a.m.2 views

CVE-2024-28809

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials...

8.8CVSS7.1AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:57 a.m.4 views

CVE-2022-43877

IBM UrbanCode Deploy UCD versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file. IBM X-Force ID: 240148...

5.5CVSS6AI score0.00107EPSS
Exploits0References1
NVD
NVD
added 2024/09/30 6:15 p.m.10 views

CVE-2024-28809

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials...

8.8CVSS0.0003EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/30 12:0 a.m.14 views

CVE-2024-28809

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials...

0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/30 12:0 a.m.6 views

CVE-2024-28809

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials...

7.3AI score0.0003EPSS
Exploits0References1
CVE
CVE
added 2024/09/30 12:0 a.m.41 views

CVE-2024-28809

The CVE-2024-28809 issue affects Infinera hiT 7300, specifically version 5.60.50. The root cause is cleartext storage of sensitive passwords in firmware update packages, enabling access to various appliance services via hardcoded credentials. The connected Red Hat, NVD, CNNVD, CVE records confirm...

8.8CVSS7.3AI score0.0003EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/08/15 7:15 p.m.12 views

Design/Logic Flaw

Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter...

5CVSS7.5AI score0.001EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder