CWE-922 Archives - CVE Vulnerability

CVE-2018-20886

Sun, 26 Feb 2023 06:48:46 +0000

cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).

The post CVE-2018-20886 appeared first on CVE Vulnerability.

CVE-2018-13313

Sun, 26 Feb 2023 06:45:57 +0000

In TOTOLINK A3002RU 1.0.8, the router provides a page that allows the user to change their account name and password. This page, password.htm, contains JavaScript which is used to confirm the user knows their current password before allowing them to change their password. However, this JavaScript contains the current user’s password in plaintext.

The post CVE-2018-13313 appeared first on CVE Vulnerability.

CVE-2020-9202

Sun, 26 Feb 2023 06:43:40 +0000

There is an information disclosure vulnerability in TE Mobile software versions V600R006C10,V600R006C10SPC100. Due to the improper storage of some information in certain specific scenario, the attacker can gain information in the victim’s device to launch the attack, successful exploit could cause information disclosure.

The post CVE-2020-9202 appeared first on CVE Vulnerability.

CVE-2020-8482

Sun, 26 Feb 2023 06:43:25 +0000

Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilege user to read file that contains confidential data

The post CVE-2020-8482 appeared first on CVE Vulnerability.

CVE-2020-8481

Sun, 26 Feb 2023 06:43:25 +0000

For ABB products ABB Ability System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody Composer 5.3, 6.1/6.2 and SPE for Melody 1.0SPx (Composer 6.3), Harmony OPC Server (HAOPC) Standalone 6.0, 6.1 and 7.0, ABB Ability System 800xA/ Advant® OCS Control Builder A 1.3 and 1.4, Advant® OCS AC100 OPC Server 5.1, 6.0 and 6.1, Composer CTK 6.1 and 6.2, AdvaBuild 3.7 SP1 and SP2, OPCServer for MOD 300 (non-800xA) 1.4, OPC Data Link 2.1 and 2.2, Knowledge Manager 8.0, 9.0 and 9.1, Manufacturing Operations Management 1812 and 1909, confidential data is written in an unprotected file. An attacker who successfully exploited this vulnerability could take full control of the computer.

The post CVE-2020-8481 appeared first on CVE Vulnerability.

CVE-2020-7000

Sun, 26 Feb 2023 06:42:55 +0000

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decryption mechanism, which may be exploited to bypass authentication of the HTML5 HMI web interface.

The post CVE-2020-7000 appeared first on CVE Vulnerability.

CVE-2020-5262

Sun, 26 Feb 2023 06:42:15 +0000

In EasyBuild before version 4.1.2, the GitHub Personal Access Token (PAT) used by EasyBuild for the GitHub integration features (like `–new-pr`, `–fro,-pr`, etc.) is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the `master`+ `develop` branches of the `easybuild-framework` repository.

The post CVE-2020-5262 appeared first on CVE Vulnerability.

CVE-2020-5008

Sun, 26 Feb 2023 06:42:12 +0000

IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores sensitive information in GET request parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 193033.

The post CVE-2020-5008 appeared first on CVE Vulnerability.

CVE-2020-4886

Sun, 26 Feb 2023 06:42:09 +0000

IBM InfoSphere Information Server 11.7 stores sensitive information in the browser’s history that could be obtained by a user who has access to the same system. IBM X-Force ID: 190910.

The post CVE-2020-4886 appeared first on CVE Vulnerability.

CVE-2020-4871

Sun, 26 Feb 2023 06:42:09 +0000

IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834.

The post CVE-2020-4871 appeared first on CVE Vulnerability.