The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
1,360 vulnerabilities with CWE-522
CVE-2022-1794
MEDIUM
CODESYS OPC DA Server <V3.5.18.20 - Info Disclosure
CVSS 5.5
CVE-2022-35411
CRITICAL
rpc.py < 0.6.0 - Unauthenticated Remote Code Execution via Pickle Deserialization
CVSS 9.8
CVE-2022-27548
MEDIUM
HCL Launch - Insufficiently Protected Credentials
CVSS 4.9
CVE-2022-23725
HIGH
PingID Integration for Windows Login < 2.8 - Insufficiently Protected Credentials via Registry Permissions
CVSS 7.7
CVE-2022-34816
MEDIUM
Jenkins HPE Network Virtualization Plugin 1.0 - Insufficiently Protected Credentials
CVSS 6.5
CVE-2022-34809
MEDIUM
Jenkins RQM Plugin < 2.8 - Insufficiently Protected Credentials
CVSS 6.5
CVE-2022-34808
MEDIUM
Jenkins Cisco Spark Plugin < 1.1.1 - Insufficiently Protected Credentials
CVSS 4.3
CVE-2022-34807
MEDIUM
Jenkins Elasticsearch Query Plugin <= 1.2 - Insufficiently Protected Credentials
CVSS 6.5
CVE-2022-34806
MEDIUM
Jenkins Jigomerge < 0.9 - Insufficiently Protected Credentials in Job Config Files
CVSS 6.5
CVE-2022-34805
MEDIUM
Jenkins Skype notifier Plugin < 1.1.0 - Insufficiently Protected Credentials
CVSS 6.5
CVE-2022-34803
MEDIUM
Jenkins OpsGenie Plugin < 1.9 - Insufficiently Protected Credentials
CVSS 4.3
CVE-2022-34802
MEDIUM
Jenkins RocketChat Notifier Plugin <= 1.5.2 - Insufficiently Protected Credentials
CVSS 4.3
CVE-2022-34800
MEDIUM
Jenkins Build Notifications Plugin <= 1.5.0 - Insufficiently Protected Credentials
CVSS 4.3
CVE-2022-34799
MEDIUM
Jenkins Deployment Dashboard Plugin <= 1.0.10 - Insufficiently Protected Credentials
CVSS 4.3
CVE-2022-31887
CRITICAL
Marval MSM v14.19.0.12476 - 0-Click Account Takeover and Privilege Escalation
CVSS 9.8
CVE-2022-31085
MEDIUM
LDAP Account Manager <8.0 - Info Disclosure
CVSS 6.1
CVE-2022-2221
MEDIUM
Devolutions Remote Desktop Manager < 2022.1.8 - Authenticated Information Exposure in My Account Settings
CVSS 6.5
CVE-2022-28167
MEDIUM
Brocade SANnav < 2.1.1.8 - Plaintext Password Exposure in Async Job Scheduler Log
CVSS 6.5
CVE-2022-33953
MEDIUM
IBM Robotic Process Automation <21.0.2 - Info Disclosure
CVSS 4.6
CVE-2022-2103
CRITICAL
SEPCO Control and Protection Relay Firmware 1.23.0-1.23.21 - Unauthenticated Sensitive File Read and RCE via FTP
CVSS 9.8
CVE-2022-1666
MEDIUM
SEPCOs Control and Protection Relay Firmware 1.23.0-1.23.21 - Insufficiently Protected Credentials
CVSS 6.5
CVE-2022-34213
MEDIUM
Jenkins Squash TM Publisher <1.0.0 - Info Disclosure
CVSS 6.5
CVE-2022-34202
MEDIUM
Jenkins EasyQA Plugin <1.0 - Info Disclosure
CVSS 6.5
CVE-2022-34199
MEDIUM
Jenkins Convertigo Mobile Platform Plugin <1.1 - Info Disclosure
CVSS 6.5
CVE-2022-21184
MEDIUM
atvise 3.5.4-3.7 - Cleartext Transmission of Sensitive Information via License Registration
CVSS 5.9
Details
Vulnerabilities
1,360