The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
1,363 vulnerabilities with CWE-522
CVE-2019-0120
MEDIUM
Intel Pentium J/N Series, Celeron J/N Series, Atom A/E3900 Series Firmware - Insufficiently Protected Credentials
CVSS 4.4
CVE-2019-0881
HIGH
Windows Kernel - Privilege Escalation
CVSS 7.8
CVE-2019-10921
HIGH
Siemens LOGO! 8 BM Firmware < 8.3 - Unauthenticated Password Exposure via Port 10005/tcp
CVSS 7.5
CVE-2019-8350
MEDIUM
Simple - Better Banking 2.45.0-2.45.3 - Unprotected User Password Exposure via Keyboard Autocomplete
CVSS 6.6
CVE-2019-11885
MEDIUM
eyeDisk - Insufficiently Protected Credentials via Cleartext Password Transmission
CVSS 6.8
CVE-2019-11820
MEDIUM
Synology Calendar <2.3.3-0620 - Info Disclosure
CVSS 5.5
CVE-2019-3938
HIGH
Crestron AM-100 and AM-101 - Insufficiently Protected Credentials in Configuration Export
CVSS 7.8
CVE-2019-10318
HIGH
Jenkins Azure AD Plugin <= 0.3.3 - Insufficiently Protected Credentials in Global Configuration
CVSS 8.8
CVE-2019-10316
HIGH
Jenkins Aqua MicroScanner Plugin <= 1.0.5 - Insufficiently Protected Credentials
CVSS 8.8
CVE-2019-10313
HIGH
Jenkins Twitter Plugin < 0.7 - Insufficiently Protected Credentials
CVSS 8.8
CVE-2019-10239
HIGH
Robotronic RunAsSpc 3.7.0.0 - Authenticated Cleartext Credential Exposure
CVSS 7.8
CVE-2019-11402
CRITICAL
Gradle Enterprise <2018.5.3 - Info Disclosure
CVSS 9.8
CVE-2019-11350
CRITICAL
CloudBees Jenkins Operations Center <2.150.2.3 - Info Disclosure
CVSS 9.8
CVE-2019-10303
HIGH
Jenkins Azure PublisherSettings Credentials Plugin < 1.2 - Insufficiently Protected Credentials
CVSS 8.8
CVE-2019-10302
HIGH
Jenkins jira-ext < 0.8 - Insufficiently Protected Credentials
CVSS 8.8
CVE-2019-6609
CRITICAL
BIG-IP 12.1.1-12.1.4, 13.0.0-13.1.1.3, 14.0.0-14.1.0.1 - Insufficiently Protected Credentials
CVSS 9.8
CVE-2019-6525
HIGH
AVEVA Wonderware System Platform < 2017 Update 2 - Improper Privilege Management via ArchestrA Network User Account
CVSS 8.8
CVE-2019-0035
MEDIUM
Junos OS 15.1-18.3 - Unauthenticated Administrative Bypass via OAM Volume Console
CVSS 6.8
CVE-2019-0032
HIGH
Juniper Networks Service Insight <18.1R1 - Info Disclosure
CVSS 7.8
CVE-2019-5615
MEDIUM
Rapid7 InsightVM <6.5.49 - Info Disclosure
CVSS 6.5
CVE-2019-10630
HIGH
Zyxel NAS326 Firmware < 5.21 - Insufficiently Protected Credentials
CVSS 8.8
CVE-2019-10299
HIGH
Jenkins CloudCoreo DeployTime Plugin - Insufficiently Protected Credentials
CVSS 8.8
CVE-2019-10298
HIGH
Jenkins Koji Plugin - Insufficiently Protected Credentials
CVSS 8.8
CVE-2019-10297
HIGH
Jenkins Sametime Plugin - Insufficiently Protected Credentials
CVSS 8.8
CVE-2019-10296
HIGH
Jenkins Serena SRA Deploy Plugin - Insufficiently Protected Credentials
CVSS 8.8
Details
Vulnerabilities
1,363