#cwe-256

共收录 35 条相关情报。

← 返回所有主题
漏洞预警2026-07-16 发布INFO

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bin2hex(random_bytes...

CVE-2026-46513

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by T

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

Frogman: API tokens stored in plaintext

CVE-2026-46513

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by T

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-07 发布INFO

Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could retrieve users’ credentials.  ...

CVE-2026-14867

Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.

历史摘要 · 未重新核验 · NVD

安全公告2026-07-02 发布INFO

Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding

CVE-2026-50268

### Summary Configuring `encrypt:rsa:algorithm=OAEP` does not enable OAEP encryption. Due to an incorrect BouncyCastle

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-25 发布INFO

Lemur user-update path stores plaintext passwords

CVE-2026-55164

## Summary `lemur.users.service.update()` writes a user's new password as plaintext to the `users.password` column. The

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-24 发布INFO

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read per...

CVE-2026-57302

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller,

历史摘要 · 未重新核验 · NVD

安全公告2026-06-22 发布INFO

motionEye: Authentication possible via password hash

CVE-2026-46488

### Summary An authentication bypass vulnerability exists due to improper trust in client-controlled cookies. The applic

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-17 发布INFO

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Configuration.Encryption 4.0.0 through 4...

CVE-2026-50268

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

update_disk_psu_baseline.sh requires password in plain text

CVE-2024-39575

update_disk_psu_baseline.sh requires password in plain text

历史摘要 · 未重新核验 · NVD

安全公告2026-06-11 发布INFO

IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be...

CVE-2024-45636

IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileg

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-11 发布INFO

IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user.

CVE-2024-45636

IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileg

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing the networ...

CVE-2018-25396

Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5.

CVE-2026-6500

Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data.

历史摘要 · 未重新核验 · NVD

安全公告2026-05-01 发布INFO

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text...

CVE-2025-36335

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a lo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-30 发布INFO

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.

CVE-2025-36335

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a lo

历史摘要 · 未重新核验 · NVD