CWE-256 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-256/ Sun, 26 Feb 2023 06:29:21 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-256 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-256/ 32 32 CVE-2019-10921 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10921/ Sun, 26 Feb 2023 06:29:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10921/ A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 10005/tcp. No […]

The post CVE-2019-10921 appeared first on CVE Vulnerability.

]]> A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 10005/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known

The post CVE-2019-10921 appeared first on CVE Vulnerability.

]]> CVE-2019-10433 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10433/ Sun, 26 Feb 2023 06:29:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10433/ Jenkins Dingding[??] Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

The post CVE-2019-10433 appeared first on CVE Vulnerability.

]]> Jenkins Dingding[??] Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

The post CVE-2019-10433 appeared first on CVE Vulnerability.

]]> CVE-2022-45392 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-45392/ Thu, 23 Feb 2023 05:21:25 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-45392/ Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by attackers with Extended Read permission, or access to the Jenkins controller file system.

The post CVE-2022-45392 appeared first on CVE Vulnerability.

]]> Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by attackers with Extended Read permission, or access to the Jenkins controller file system.

The post CVE-2022-45392 appeared first on CVE Vulnerability.

]]> CVE-2022-41255 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-41255/ Thu, 23 Feb 2023 05:20:44 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-41255/ Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-41255 appeared first on CVE Vulnerability.

]]> Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-41255 appeared first on CVE Vulnerability.

]]> CVE-2022-38665 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-38665/ Thu, 23 Feb 2023 05:20:16 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-38665/ Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-38665 appeared first on CVE Vulnerability.

]]> Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-38665 appeared first on CVE Vulnerability.

]]> CVE-2022-34805 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-34805/ Thu, 23 Feb 2023 05:19:31 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-34805/ Jenkins Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-34805 appeared first on CVE Vulnerability.

]]> Jenkins Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-34805 appeared first on CVE Vulnerability.

]]> CVE-2022-34816 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-34816/ Thu, 23 Feb 2023 05:19:31 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-34816/ Jenkins HPE Network Virtualization Plugin 1.0 stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-34816 appeared first on CVE Vulnerability.

]]> Jenkins HPE Network Virtualization Plugin 1.0 stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-34816 appeared first on CVE Vulnerability.

]]> CVE-2022-34809 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-34809/ Thu, 23 Feb 2023 05:19:31 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-34809/ Jenkins RQM Plugin 2.8 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-34809 appeared first on CVE Vulnerability.

]]> Jenkins RQM Plugin 2.8 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-34809 appeared first on CVE Vulnerability.

]]> CVE-2022-34807 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-34807/ Thu, 23 Feb 2023 05:19:31 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-34807/ Jenkins Elasticsearch Query Plugin 1.2 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-34807 appeared first on CVE Vulnerability.

]]> Jenkins Elasticsearch Query Plugin 1.2 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

The post CVE-2022-34807 appeared first on CVE Vulnerability.

]]> CVE-2022-34806 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-34806/ Thu, 23 Feb 2023 05:19:31 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-34806/ Jenkins Jigomerge Plugin 0.9 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

The post CVE-2022-34806 appeared first on CVE Vulnerability.

]]> Jenkins Jigomerge Plugin 0.9 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

The post CVE-2022-34806 appeared first on CVE Vulnerability.

]]>