CWE:
 

Topic
Date
Author
High
Across DR-810 ROM-0 - Backup File Disclosure
12.01.2019
SajjadBnz
Med.
MensaMax 4.3 Hardcoded Encryption Key Disclosure
02.10.2018
Stefan Pietsch
Med.
Trend Micro ServerProtect Disclosure / CSRF / XSS
26.05.2017
Multiple
Med.
QNAP QTS 4.2.x XSS / Command Injection / Transport Issues
18.02.2017
Harry Sintonen
Med.
Intel Driver Update Utility 2.2.0.5 Man-In-The-Middle
20.01.2016
Core
Med.
ElasticSearch Cloud-Azure Insecure Transit
20.09.2015
Pedro Andujar


CVEMAP Search Results

CVE
Details
Description
2019-11-12
Low
CVE-2010-4177

Vendor: Oracle
Software: Mysql-gui-tools
 

 
mysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text form via the list of running processes.

 
2019-10-01
Medium
CVE-2019-0231

Vendor: Apache
Software: MINA
 

 
Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.

 
Medium
CVE-2019-10435

Vendor: Jenkins
Software: Sourcegear vault
 

 
Jenkins SourceGear Vault Plugin transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

 
Medium
CVE-2019-10434

Vendor: Jenkins
Software: Ldap email
 

 
Jenkins LDAP Email Plugin transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

 
2019-09-27
Low
CVE-2019-16924

Vendor: Nuvending
Software: Nulock
 

 
The Nulock application 1.5.0 for mobile devices sends a cleartext password over Bluetooth, which allows remote attackers (after sniffing the network) to take control of the lock.

 
2019-09-25
Medium
CVE-2019-10428

Vendor: Jenkins
Software: Aqua securit...
 

 
Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

 
Medium
CVE-2019-10427

Vendor: Jenkins
Software: Aqua microsc...
 

 
Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

 
Medium
CVE-2019-10412

Vendor: Jenkins
Software: Inedo proget
 

 
Jenkins Inedo ProGet Plugin 1.2 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

 
Medium
CVE-2019-10411

Vendor: Jenkins
Software: Inedo buildm...
 

 
Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

 
2019-04-25
Low
CVE-2018-1360

Vendor: Fortinet
Software: Fortimanager
 

 
A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses.

 

 


Copyright 2019, cxsecurity.com

 

Back to Top