CWE:

	Topic	Date	Author
Med.	WIN-911 7.17.00 Insecure File Permissions / Plaintext Password Storage	07.09.2016	sh4d0wman
High	Easy Hosting Control Panel 0.37.9 Bypass / File Upload / Disclosure	31.03.2016	Kyle Lovett
High	Western Digital My Net Password Disclosure	02.08.2013	K Lovett

---

CVEMAP Search Results

CVE

Details

Description

2024-04-03

CVE-2024-28782

Updating...

IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 285698.

2024-03-26

CVE-2024-25138

Updating...

In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device.

2024-02-08

CVE-2023-6518

Updating...

Plaintext Storage of a Password vulnerability in Mia Technology Inc. MIA-MED allows Read Sensitive Strings Within an Executable.This issue affects MIA-MED: before 1.0.7.

2023-10-25

CVE-2023-42493

Updating...

EisBaer Scada - CWE-256: Plaintext Storage of a Password

2023-09-18

CVE-2023-39452

Updating...

** UNSUPPPORTED WHEN ASSIGNED ** The web application that owns the device clearly stores the credentials within the user management section. Obtaining this information can be done remotely due to the incorrect management of the sessions in the web application.

2023-09-15

CVE-2023-4984

Updating...

A vulnerability was found in didi KnowSearch 0.3.2/0.3.1.2. It has been rated as problematic. This issue affects some unknown processing of the file /api/es/admin/v3/security/user/1. The manipulation leads to unprotected storage of credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239795.

2023-09-11

CVE-2023-39227

Updating...

?Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user�??s credentials.

2023-07-25

CVE-2023-35067

Updating...

Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensitive Strings Within an Executable.This issue affects E-Invoice Approval System: before v.20230701.

2023-07-07

CVE-2023-35765

Updating...

PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.

2023-07-03

CVE-2023-3395

Updating...

?All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain the plaintext password by using a memory viewer.

 

---

Copyright 2024, cxsecurity.com