CWE-256

EisBaer Scada - CWE-256: Plaintext Storage of a Password

EisBaer Scada - CWE-256: Plaintext Storage of a Password

A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext unless specific security

A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext unless specific security ...

Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.

Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.

A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4

A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4...

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions

Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.

Several credentials for the local PostgreSQL database are stored in plain text (partially base64 encoded).

Several credentials for the local PostgreSQL database are stored in plain text (partially base64 encoded).

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to lack of encryption or hashing in storing of passwords within the router's firmware/ d

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to lack of encryption or hashing in storing of passwords within the router's firmware/ d...

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user.

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user.

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext.

SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext.

Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to store credentials in plaintext.

Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to store credentials in plaintext.

In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device.

In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device.

Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.

Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.

Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings.

Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings.

HCL Launch stores user credentials in plain clear text which can be read by a local user.

HCL Launch stores user credentials in plain clear text which can be read by a local user.

Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL.

Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL.

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store passwords in cleartext.

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store passwords in cleartext.

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.

An issue in Debezium Community debezium-ui v.2.5 allows a local attacker to execute arbitrary code via the refresh page function.

An issue in Debezium Community debezium-ui v.2.5 allows a local attacker to execute arbitrary code via the refresh page function.

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware.

IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.

IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.

SnapGathers versions prior to 4.9 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext domain user credentials

SnapGathers versions prior to 4.9 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext domain user credentials

Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, ex...

IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user.

IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user.