Lucene search
K

13 matches found

CNNVD
CNNVD
added 2026/05/28 12:0 a.m.8 views

Tigera Calico 安全漏洞

Tigera Calico is an open-source network security solution developed by the American company Tigera, designed for container, virtual machine, and host workloads. Tigera Calico has a security vulnerability, which stems from the Azure IPAM plugin recording unencrypted configuration mappings in logs...

6CVSS5.8AI score0.00043EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.1 views

Growatt ShineLan-X 安全漏洞

Growatt ShineLan-X is a data logger for a photovoltaic PV inverter from Growatt, a Chinese company. A security vulnerability exists in Growatt ShineLan-X that stems from a lack of encryption in the configuration interface, which could lead to interception and manipulation of communication request...

9.4CVSS6.5AI score0.00009EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-8037

Malware in sbrugna...

7.5CVSS7.5AI score0.00145EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-20842

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00105EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/07/09 12:0 a.m.1 views

PT-2025-28907 · Jenkins · Jenkins Statistics Gatherer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Statistics Gatherer Plugin versions 2.0.3 and earlier Description: The Jenkins Statistics Gatherer Plugin does not mask the AWS Secret Key on the global configuration form and stores it unencrypted in the...

5.3CVSS5.8AI score0.00102EPSS
Exploits0References10
RedhatCVE
RedhatCVE
added 2025/05/22 5:0 p.m.5 views

CVE-2020-2239

Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system...

4.3CVSS6.7AI score0.00048EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 4:51 a.m.5 views

CVE-2019-10430

Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...

5.5CVSS6.5AI score0.00011EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/18 11:3 a.m.9 views

CVE-2024-23942 MB connect line: Configuration File on the client workstation is not encrypted

A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS...

7.1CVSS0.00033EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/03/18 12:0 a.m.2 views

PT-2025-11582 · Mb Connect Line · Mbconnect24 +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing t...

7.1CVSS6.9AI score0.00033EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/02/15 12:0 a.m.2 views

Broadcom Fabric OS 安全漏洞

Broadcom Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Broadcom Corporation USA. A security vulnerability exists in Broadcom Fabric OS that stems from a configuration that does not enable SNMP password encryption, which exposes the SNMP...

5.3CVSS6.8AI score0.0009EPSS
Exploits0References2
NCSC
NCSC
added 2023/01/26 12:0 a.m.2 views

Vulnerability found in KeePass

A vulnerability has been found in KeePass. A malicious person could potentially exploit the vulnerability to gain access to data stored in a KeePass database. This could include usernames, passwords and email addresses. Successful misuse requires that the malicious party have access to the system...

5.5CVSS6.1AI score0.41441EPSS
Exploits2
CNVD
CNVD
added 2016/12/12 12:0 a.m.1 views

Moxa MiiNePort Information Disclosure Vulnerability (CNVD-2016-12353)

Moxa MiiNePort is an embedded device networking module from Moxa designed for manufacturers to connect serial devices to a network connection. An information disclosure vulnerability exists in Moxa MiiNePort, which arises from the program's failure to encrypt configuration data in a file. An...

5.3CVSS6.5AI score0.00161EPSS
Exploits0References1
Check Point Advisories
Check Point Advisories
added 2013/10/21 12:0 a.m.8 views

Multiple Products DVR Configuration Disclosure (CVE-2013-1391)

A configuration disclosure vulnerability has been reported in the DVR web server of multiple vendors which allows authentication bypass. A remote attacker could get the unencrypted configuration file by requesting the "/DVR.cfg" without entering credentials. Successful exploitation of this...

5CVSS7.3AI score0.86369EPSS
Exploits4
Rows per page
Query Builder