#cwe-256

共收录 35 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布HIGH

Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials. This is...

CVE-2026-86715

Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. V

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could cause a user's plaintext password t...

CVE-2026-103094

ServiceNow has remediated an information disclosure vulnerability that was identified in the ServiceNow AI Platform. Thi

来源摘录 · NVD

安全公告2026-10-23 发布INFO

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the...

CVE-2026-110975

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return d

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially ...

CVE-2026-70414

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low privileges to steal user API keys...

CVE-2026-104892

Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

Plane: Plaintext logging of API token

CVE-2026-104892

Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-16 发布INFO

On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sensitive requests and responses may be unintentionally logge...

CVE-2026-2380

On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sens

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, motionEye accepts ...

CVE-2026-46488

motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 2026090...

CVE-2026-19051

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including S...

CVE-2026-15933

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An authenticated administrator can

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

HDD password plaintext is stored in a UEFI variable.

CVE-2021-38489

HDD password plaintext is stored in a UEFI variable.

历史摘要 · 未重新核验 · NVD

安全公告2026-08-29 发布INFO

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in...

CVE-2026-82453

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attacker

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-29 发布INFO

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing ...

CVE-2026-82453

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG embedded cleartext role passwords i...

CVE-2026-55765

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Lemur manages TLS certificate creation. Prior to 1.9.2, lemur.users.service.update assigned a replacement password directly to users.password, while lemur/users/models.py regist...

CVE-2026-55164

Lemur manages TLS certificate creation. Prior to 1.9.2, lemur.users.service.update assigned a replacement password direc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-29 发布INFO

Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0.0, users were also requested to change the...

CVE-2026-50641

Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-28 发布INFO

Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication de...

CVE-2026-41874

Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with acces

历史摘要 · 未重新核验 · NVD

安全公告2026-07-25 发布INFO

Weintek cMT3092X HMI stores user account passwords in plaintext.

CVE-2026-61886

Weintek cMT3092X HMI stores user account passwords in plaintext.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-24 发布INFO

Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password...

CVE-2026-40430

Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cl

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-22 发布INFO

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with ...

CVE-2026-44187

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with

历史摘要 · 未重新核验 · NVD