CVE & Exploit Intelligence Database

CVE-2025-62327 4.9 MEDIUM EPSS 0.00

In HCL DevOps Deploy 8.1.2.0 through 8.1.2.3, a user with LLM configuration privileges may be able to recover a credential previously saved for performing authenticated LLM Queries.

CWE-522 Jan 07, 2026

CVE-2025-67732 6.5 MEDIUM EPSS 0.00

Dify is an open-source LLM app development platform. Prior to version 1.11.0, the API key is exposed in plaintext to the frontend, allowing non-administrator users to view and reuse it. This can lead to unauthorized access to third-party services, potentially consuming limited quotas. Version 1.11.0 fixes the issue.

CWE-522 Jan 05, 2026

CVE-2025-64420 9.9 CRITICAL EPSS 0.00

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions prior to and including v4.0.0-beta.434, low privileged users are able to see the private key of the root user on the Coolify instance. This allows them to ssh to the server and authenticate as root user, using the private key. As of time of publication, it is unclear if a patch is available.

CWE-522 Jan 05, 2026

CVE-2025-64122 5.5 MEDIUM EPSS 0.00

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.

CWE-522 Jan 02, 2026

CVE-2021-47741 7.5 HIGH 1 PoC Analysis EPSS 0.00

ZBL EPON ONU Broadband Router V100R001 contains a privilege escalation vulnerability that allows limited administrative users to elevate access by sending requests to configuration endpoints. Attackers can exploit the vulnerability by accessing the configuration backup or password page to disclose the super user password and gain additional privileged functionalities.

CWE-522 Dec 31, 2025

CVE-2021-47726 7.5 HIGH 1 PoC Analysis EPSS 0.00

NuCom 11N Wireless Router 5.07.90 contains a privilege escalation vulnerability that allows non-privileged users to access administrative credentials through the configuration backup endpoint. Attackers can send a crafted HTTP GET request to the backup configuration page with a specific cookie to retrieve and decode the admin password in Base64 format.

CWE-522 Dec 31, 2025

CVE-2025-15113 9.3 CRITICAL EPSS 0.00

Ksenia Security lares (legacy model) Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program memory and potentially execute arbitrary code on the home automation system's web server.

CWE-522 Dec 30, 2025

CVE-2025-66029 7.6 HIGH EPSS 0.00

Open OnDemand provides remote web access to supercomputers. In versions 4.0.8 and prior, the Apache proxy allows sensitive headers to be passed to origin servers. This means malicious users can create an origin server on a compute node that record these headers when unsuspecting users connect to it. Maintainers anticipate a patch in a 4.1 release. Workarounds exist for 4.0.x versions. Using `custom_location_directives` in `ood_portal.yml` in version 4.0.x (not available for versions below 4.0) centers can unset and or edit these headers. Note that `OIDCPassClaimsAs both` is the default and centers can set `OIDCPassClaimsAs ` to `none` or `environment` to stop passing these headers to the client. Centers that have an OIDC provider with the `OIDCPassClaimsAs` with `none` or `environment` settings can adjust the settings using guidance provided in GHSA-2cwp-8g29-9q32 to unset the mod_auth_openidc_session cookies.

CWE-522 Dec 17, 2025

CVE-2025-14148 6.5 MEDIUM EPSS 0.00

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token.

CWE-522 Dec 15, 2025

CVE-2025-58130 9.1 CRITICAL EPSS 0.00

Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1. Users are encouraged to upgrade to version 1.13.0, the latest release.

CWE-522 Dec 12, 2025

CVE-2020-36896 7.5 HIGH 1 PoC Analysis EPSS 0.01

QiHang Media Web Digital Signage 3.0.9 contains a cleartext credentials vulnerability that allows unauthenticated attackers to access administrative login information through an unprotected XML file. Attackers can retrieve hardcoded admin credentials by requesting the '/xml/User/User.xml' file, enabling direct authentication bypass.

CWE-522 Dec 10, 2025

CVE-2025-64898 4.3 MEDIUM EPSS 0.00

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write access. An attacker could leverage this vulnerability to gain unauthorized access by exploiting improperly stored or transmitted credentials. Exploitation of this issue does not require user interaction.

CWE-522 Dec 10, 2025

CVE-2025-63361 5.7 MEDIUM EPSS 0.00

Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to render the Administrator password in plaintext.

CWE-522 Dec 04, 2025

CVE-2025-13758 3.5 LOW EPSS 0.00

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

CWE-522 Nov 27, 2025

CVE-2025-13164 4.9 MEDIUM EPSS 0.00

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credentials of AD and system mail from the system frontend.

CWE-522 Nov 17, 2025

CVE-2025-13163 4.9 MEDIUM EPSS 0.00

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.

CWE-522 Nov 17, 2025

CVE-2025-13187 5.3 MEDIUM EPSS 0.00

A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipulation of the argument NomeUsuario/SenhaAcess leads to unprotected storage of credentials. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

CWE-522 Nov 14, 2025

CVE-2025-36096 9.0 CRITICAL EPSS 0.00

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.

CWE-522 Nov 13, 2025

CVE-2025-6571 6.0 MEDIUM EPSS 0.00

A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.

CWE-522 Nov 11, 2025

CVE-2025-42897 5.3 MEDIUM EPSS 0.00

Due to information disclosure vulnerability in anonymous API provided by SAP Business One (SLD), an attacker with normal user access could gain access to unauthorized information. As a result, it has a low impact on the confidentiality of the application but no impact on the integrity and availability.

CWE-522 Nov 11, 2025