CWE-522 Archives - CVE Vulnerability

CVE-2018-9279

Sun, 26 Feb 2023 06:51:47 +0000

An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user’s password. The web page displayed by the appliance contains the password in cleartext. Passwords could be retrieved by browsing the source code of the webpage.

The post CVE-2018-9279 appeared first on CVE Vulnerability.

CVE-2018-9280

Sun, 26 Feb 2023 06:51:47 +0000

An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user’s password. The web page displayed by the appliance contains the password in cleartext. Passwords of the read and write users could be retrieved by browsing the source code of the webpage.

The post CVE-2018-9280 appeared first on CVE Vulnerability.

CVE-2018-9160

Sun, 26 Feb 2023 06:51:45 +0000

SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.

The post CVE-2018-9160 appeared first on CVE Vulnerability.

CVE-2018-9031

Sun, 26 Feb 2023 06:51:42 +0000

The login interface on TNLSoftSolutions Sentry Vision 3.x devices provides password disclosure by reading an “if(pwd ==” line in the HTML source code. This means, in effect, that authentication occurs only on the client side.

The post CVE-2018-9031 appeared first on CVE Vulnerability.

CVE-2018-8851

Sun, 26 Feb 2023 06:51:37 +0000

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface.

The post CVE-2018-8851 appeared first on CVE Vulnerability.

CVE-2018-7820

Sun, 26 Feb 2023 06:51:11 +0000

A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled.

The post CVE-2018-7820 appeared first on CVE Vulnerability.

CVE-2018-7782

Sun, 26 Feb 2023 06:51:10 +0000

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text.

The post CVE-2018-7782 appeared first on CVE Vulnerability.

CVE-2018-7698

Sun, 26 Feb 2023 06:51:08 +0000

An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices. The mydlink+ app sends the username and password for connected D-Link cameras (such as DCS-933L and DCS-934L) unencrypted from the app to the camera, allowing attackers to obtain these credentials and gain control of the camera including the ability to view the camera’s stream and make changes without the user’s knowledge.

The post CVE-2018-7698 appeared first on CVE Vulnerability.

CVE-2018-7510

Sun, 26 Feb 2023 06:51:04 +0000

In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords are presented in plaintext in a file that is accessible without authentication.

The post CVE-2018-7510 appeared first on CVE Vulnerability.

CVE-2018-7518

Sun, 26 Feb 2023 06:51:04 +0000

In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, an attacker with network access to the integrated web server could retrieve default or user defined credentials stored and transmitted in an insecure manner.

The post CVE-2018-7518 appeared first on CVE Vulnerability.