CWE-522

The email media OAuth field 'Client secret' cannot be read after saving, but a Super Admin can leak it by setting a mali

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HT

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio

Kerberos Agent is an open source video (surveillance) management agent. Prior to version 3.6.26, the Kerberos Hub upload

Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, internal/hcl/re

RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Althoug

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.

Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration f

The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that

Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privileg

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre.

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre

**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B

Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials.

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Pa

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in

RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessibl

GenX_FX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX F

An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines

E3 Site Supervisor Control (firmware version < 2.31F01) generates the root linux password on each boot. An attacker can

E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An at

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.141

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 (VA an

Ksenia Security lares (legacy model) Home Automation version 1.6 contains an unprotected endpoint vulnerability that all

An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produc

Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11

Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege esc

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufactu

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of ce

A passback vulnerability which relates to production printers and office multifunction printers.

A passback vulnerability which relates to office/small office multifunction printers and laser printers.

An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator acc

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to a privileged account . A succ

A local privilege escalation vulnerability exists in NSClient++ 0.5.2.35 when both the web interface and ExternalScripts

Oxford Nanopore Technologies' MinKNOW software at or prior to version 24.11 stores authentication tokens in a file locat

An information disclosure vulnerability exists in the Vault API functionality of ClearML Enterprise Server 3.22.5-1533.

In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources

With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This

Open OnDemand provides remote web access to supercomputers. In versions 4.0.8 and prior, the Apache proxy allows sensiti

Dell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password vulnerability. A high privil

Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privil

The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core

IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download tempo

IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download tempo

Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user

A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and