The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
1,360 vulnerabilities with CWE-522
CVE-2019-4697
MEDIUM
IBM Security Guardium Data Encryption <3.0.0.2 - Info Disclosure
CVSS 6.5
CVE-2019-4693
MEDIUM
IBM Security Guardium Data Encryption <3.0.0.2 - Info Disclosure
CVSS 4.4
CVE-2019-18256
MEDIUM
BIOTRONIK CardioMessenger II - Info Disclosure
CVSS 4.6
CVE-2019-13023
MEDIUM
JetSelect - Insufficiently Protected Credentials via HTML Password Field Obfuscation
CVSS 6.5
CVE-2019-18868
CRITICAL
Blaauw Remote Kiln Control <v3.00r4 - Info Disclosure
CVSS 9.8
CVE-2019-19218
HIGH
BMC Control-M/Agent 7.0.00.000 - Info Disclosure
CVSS 7.5
CVE-2019-4668
MEDIUM
IBM UrbanCode Deploy <7.0.4.0 - Info Disclosure
CVSS 5.5
CVE-2019-19105
MEDIUM
ABB Telephone Gateway TG/S <3.2 - Info Disclosure
CVSS 6.2
CVE-2019-19096
MEDIUM
HitachiEnergy eSOMS 6.0-6.0.2 - Insufficiently Protected Credentials in Redis Data Structure
CVSS 6.1
CVE-2019-3942
HIGH
Advantech WebAccess 8.3.4 - Unauthenticated Arbitrary File Read via RPC
CVSS 7.5
CVE-2019-18785
HIGH
SuiteCRM <7.10.21, <7.11.9 - Info Disclosure
CVSS 7.5
CVE-2019-16067
HIGH
NETSAS Enigma NMS <65.0.0 - Info Disclosure
CVSS 7.5
CVE-2019-15656
HIGH
D-Link DSL-2875AL and DSL-2877AL Firmware < 1.00.05 - Unauthenticated Credential Disclosure via index.asp
CVSS 7.5
CVE-2019-15655
HIGH
D-Link DSL-2875AL Firmware < 1.00.05 - Unauthenticated Password Disclosure via /romfile.cfg Request
CVSS 7.5
CVE-2019-15653
HIGH
Comba AP2600-I A02,0202N00PD2 - Insufficiently Protected Credentials via Login Page HTML Source
CVSS 7.5
CVE-2019-13394
CRITICAL
NETGEAR CG3700b Firmware V2.02.03 - Cleartext Transmission of Sensitive Information via HTTP Basic Authentication
CVSS 9.8
CVE-2019-5648
MEDIUM
Barracuda Load Balancer ADC Firmware <= 6.4 - Authenticated LDAP Credential Exposure via Configuration Change
CVSS 6.5
CVE-2019-9104
HIGH
Moxa MB3170, MB3270, MB3180, MB3280, MB3480, MB3660 Firmware - Insufficiently Protected Credentials
CVSS 7.5
CVE-2019-10705
HIGH
Western Digital SanDisk X600 Firmware < x6112100 - Insufficiently Protected Credentials
CVSS 7.5
CVE-2019-11686
MEDIUM
Western Digital SanDisk - Info Disclosure
CVSS 5.5
CVE-2019-10706
MEDIUM
Western Digital SanDisk X300 X300s X400 X600 Firmware < x6112100 - Insufficiently Protected Credentials
CVSS 6.3
CVE-2019-19119
MEDIUM
PRTG <19.4.53 - Privilege Escalation
CVSS 5.5
CVE-2019-19539
MEDIUM
Idelji Web ViewPoint - Info Disclosure
CVSS 5.5
CVE-2019-19823
HIGH
TOTOLINK A3002RU < 2.0.0 - Cleartext Password Storage in Flash Memory
CVSS 7.5
CVE-2019-19898
HIGH
IXP EasyInstall 6.2.13723 - Cleartext Transmission of Sensitive Information via Administrator Console
CVSS 7.5
Details
Vulnerabilities
1,360