Sensitive Data Exposure

apacheairflow is vulnerable to Sensitive Data Exposure. The vulnerability is due to sensitive variable values being logged unencrypted in audit logs when set via the CLI, which allows an attacker with audit log access to view those sensitive values...

CVE-2024-36464 Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

The vulnerability of the web interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) management platform, which involves unencrypted storage of data in files or on disks, allows attackers to disclose protected information.

The vulnerability of the web interface of the Cisco Nexus Dashboard Fabric Controller NDFC management platform involves unencrypted storage of data in files or on disks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

CVE-2024-52525 Nextcloud Server User password is available in memory of the PHP process

Nextcloud Server is a self hosted personal cloud system. Under certain conditions the password of a user was stored unencrypted in the session data. The session data is encrypted before being saved in the session storage Redis or disk, but it would allow a malicious process that gains access to t...

User password is available in memory of the PHP process

None...

The vulnerability of the microprogrammed software of Siemens LOGO! V8 BM and SIPLUS LOGO! V8 BM lies in the unencrypted storage of passwords in an open format, allowing attackers to gain access to confidential information.

The vulnerability of the microprogrammed logic controllers Siemens LOGO! V8 BM and SIPLUS LOGO! V8 BM lies in the unencrypted storage of passwords in an open format. Exploiting this vulnerability can allow attackers to access confidential information...

CVE-2024-48973

The CVE-2024-48973 entry concerns Baxter Life2000/Life2000 ventilator devices with the debug port on the serial interface enabled by default. Concrete details: debugging is unencrypted and may allow unauthorized disclosure of information and unintended changes to device settings or performance. I...

Baxter Life2000 安全漏洞

Baxter Life2000 is a mask-less non-invasive ventilator from Baxter. A security vulnerability exists in Baxter Life2000 version 06.08.00.00 and prior versions, which originated when enabled by default, that allows sending and receiving of unencrypted messages, which could result in unauthorized...

PT-2024-33307 · Unknown · Ventilator

Name of the Vulnerable Software and Affected Versions: Ventilator affected versions not specified Description: The ventilator's serial interface has its debug port enabled by default, allowing an attacker to send and receive unencrypted messages. This could result in unauthorized disclosure of...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2024-45294)

Cisco Unified Communications Manager is a call processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. An information disclosure vulnerability exists in Cisco Unifie...

CVE-2024-49394 Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender...

CVE-2024-49394

CVE-2024-49394 affects mutt and neomutt: the In-Reply-To header is not cryptographically signed, enabling an attacker to impersonate the sender by reusing an unencrypted but signed email. Public references in the connected documents show multiple advisories addressing this issue and releasing fix...

The vulnerability of the ActiveMQ broker platform’s security features, involving the storage of sensitive information in unencrypted form, allows attackers to disclose the protected information.

The vulnerability of the ActiveMQ messaging broker, within the Cortex XSOAR and Cortex XSIAM security platforms, relates to the storage of sensitive information in unencrypted form. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

CVE-2024-50378

Airflow versions before 2.10.3 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sensitive variables were set via airflow CLI, values of those variables appeared in the audit log and were stored...

CVE-2024-30142

HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel...

CVE-2024-30142 HCL BigFix Compliance is affected by a missing secure flag on a cookie

HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel...

CVE-2024-30142 HCL BigFix Compliance is affected by a missing secure flag on a cookie

HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel...

CVE-2024-30142

HCL BigFix Compliance is affected by a missing secure flag on a cookie, enabling cookie theft via XSS and potentially unauthorized access or cookies transmitted over unencrypted channels. The CVE refers to vulnerability in product HCL BigFix Compliance (reported as 2024-30142) and is corroborated...

CVE-2024-20457

A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of unencrypted credentia...

CVE-2024-20457

A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of unencrypted credentia...