Show filters
185 Total Results
Displaying 21-30 of 185
Sort by:
Attacker Value
Unknown
CVE-2021-33325
Disclosure Date: August 03, 2021 (last updated February 23, 2025)
The Portal Workflow module in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 93, 7.1 before fix pack 19, and 7.2 before fix pack 7, user's clear text passwords are stored in the database if workflow is enabled for user creation, which allows attackers with access to the database to obtain a user's password.
0
Attacker Value
Unknown
CVE-2021-37452
Disclosure Date: July 25, 2021 (last updated February 23, 2025)
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files.
0
Attacker Value
Unknown
CVE-2021-37468
Disclosure Date: July 25, 2021 (last updated February 23, 2025)
NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.
0
Attacker Value
Unknown
CVE-2021-31581
Disclosure Date: July 22, 2021 (last updated February 23, 2025)
The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be escaped by abusing the 'Edit MySQL Configuration' command. This command launches a standard vi editor interface which can then be escaped. This issue was resolved in Akkadian OVA appliance version 3.0 (and later), Akkadian Provisioning Manager 5.0.2 (and later), and Akkadian Appliance Manager 3.3.0.314-4a349e0 (and later).
0
Attacker Value
Unknown
CVE-2020-22741
Disclosure Date: July 19, 2021 (last updated February 23, 2025)
An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partial signature in multisignature.
0
Attacker Value
Unknown
CVE-2020-12731
Disclosure Date: July 15, 2021 (last updated February 23, 2025)
The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whence it can be read by other applications.
0
Attacker Value
Unknown
CVE-2020-4980
Disclosure Date: July 15, 2021 (last updated February 23, 2025)
IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.
0
Attacker Value
Unknown
CVE-2021-20510
Disclosure Date: July 13, 2021 (last updated February 23, 2025)
IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 198299
0
Attacker Value
Unknown
CVE-2021-31817
Disclosure Date: July 08, 2021 (last updated February 23, 2025)
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.
0
Attacker Value
Unknown
CVE-2021-31816
Disclosure Date: July 08, 2021 (last updated February 23, 2025)
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.
0
