CVE-2021-33325

The CVE-2021-33325 entry documents a vulnerability in the Portal Workflow module of Liferay Portal (versions: 7.3.2 and earlier) and Liferay DXP (7.0 before fix pack 93, 7.1 before fix pack 19, 7.2 before fix pack 7) where cleartext passwords are stored in the database when workflow is enabled fo...

Liferay Portal 和 Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform...

DELL EMC Repository Manager has an unspecified vulnerability

DELL EMC Repository Manager is an application within the Dell OpenManage product portfolio from Dell USA that allows IT administrators to easily manage system updates.Dell Repository Manager provides a searchable interface for creating custom software collections that are A security vulnerability...

Ice Hrm Cross-Site Request Forgery Vulnerability

Ice Hrm is a human resource management system. A security vulnerability exists in Ice Hrm 29.0.0 OS. An attacker can exploit the vulnerability to create new administrator accounts or change user passwords...

CVE-2021-34244

A cross site request forgery CSRF vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create new admin accounts or change users' passwords...

CVE-2021-34244

A cross site request forgery CSRF vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to create new admin accounts or change users' passwords...

CVE-2020-27150

In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the system and other sensitive data in the original form if “Pre-shared key” doesn’t set...

The vulnerability of the GateManager communication server, related to insufficient calculation of password hashes, allows attackers to view user passwords.

The vulnerability of the GateManager communication server is related to insufficient calculation of the password hash. Exploiting this vulnerability allows a malicious actor to remotely view user passwords...

Clear-text insertion of user's passwords into log files

...

Logic flaw vulnerability in UCMS (CNVD-2021-19733)

UCMS is a simple web content management system. A logic flaw vulnerability exists in UCMS, which can be exploited by attackers to modify user passwords...

CVE-2020-10538

An issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as MD5 hashes in the database. MD5 can be brute-forced efficiently and should not be used for such purposes. Additionally, since no salt is used, rainbow tables can speed up the attack...

CVE-2020-35128

Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an externally crafted JavaScript file, an attacker could eventually perform actions as the target use...

CVE-2021-1144

CVE-2021-1144 (CMX Privilege Escalation) affects Cisco Connected Mobile Experiences (CMX). The issue is an authorization-check flaw in password-change handling that allows a remote, authenticated user without administrative privileges to alter the password of any user, including admins, by sendin...

Information disclosure

A vulnerability has been identified in Opcenter Execution Core V8.2, Opcenter Execution Core V8.3. The application contains an information leakage vulnerability in the handling of web client sessions. A local attacker who has access to the Web Client Session Storage could disclose the passwords o...

Information Disclosure

xrdp is vulnerable to information disclosure. The vulnerability exists in /.vnc/sesman$usernamepasswd due to the successful logging to RDP into an xrdp session,uses a known key to store session passwords in text files. Allows an attacker to decrypt the file and obtain a user password...

CVE-2020-26079

A vulnerability in the web UI of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to obtain hashes of user passwords on an affected device. The vulnerability is due to insufficient protection of user credentials. An attacker could exploit this vulnerability by...

Design/Logic Flaw

A vulnerability in the web UI of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to obtain hashes of user passwords on an affected device. The vulnerability is due to insufficient protection of user credentials. An attacker could exploit this vulnerability by...

CVE-2020-26079 Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability

A vulnerability in the web UI of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to obtain hashes of user passwords on an affected device. The vulnerability is due to insufficient protection of user credentials. An attacker could exploit this vulnerability by...

CVE-2020-26079 Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability

A vulnerability in the web UI of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to obtain hashes of user passwords on an affected device. The vulnerability is due to insufficient protection of user credentials. An attacker could exploit this vulnerability by...

Cisco IoT Field Network Director Unprotected Storage of Credentials Vulnerability

A vulnerability in the web UI of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to obtain hashes of user passwords on an affected device. The vulnerability is due to insufficient protection of user credentials. An attacker could exploit this vulnerability by...