Advisories · Weakness
CWE-260.
Every Advisory and CVE whose sources give the weakness CWE-260, newest first.
- CVSS 5.3 Medium
Improperly Stored Credentials
- Itron MV-90 xi
- CWE-257
- CWE-260
- CVSS 8.7 High
Hisilicon HiIpcam V100R003 Information Disclosure via Directory Traversal
- Hisilicon HiIpcam
- CWE-260
- CVSS 6.3 Medium
TaleLin Lin-CMS Tests Folder config.py password in configuration file
- TaleLin Lin-CMS
- CWE-255
- CWE-260
- CVSS 8.7 High
MiniDVBLinux 5.4 Unauthenticated Configuration Download via Backup Endpoint
- MiniDVBLinux(TM) Distribution (MLD)
- CWE-260
- CVSS 9.9 CriticalCritical · CVSS 9+
Tinycontrol LAN Controller v3 LK3 1.58a Unauthenticated Configuration Backup Disclosure
- Tinycontrol LAN Controller v
- Tinycontrol LK
- CWE-260
- CVSS 6.5 Medium
IBM QRadar SIEM Information Disclosure
- IBM QRadar Security Information and Event Management
- CWE-260
- CVSS 5.5 Medium
IBM Sterling B2B Integrator information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-256
- CWE-260
- CVSS 5.1 Medium
IBM MQ information disclosure
- IBM MQ
- CWE-260
- CVSS 9.8 CriticalCritical · CVSS 9+
eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)
- kristoferfannar eslint-ban-moment
- CWE-260
- CVSS 5.3 Medium
EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)).
- CWE-260
- CVSS 9.3 CriticalCritical · CVSS 9+
BRAIN2 Configuration file for database access not sufficiently secured
- Bizerba SE & Co. KG BRAIN2
- CWE-260
- CVSS 9.6 CriticalCritical · CVSS 9+
IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure
- IBM QRadar Suite Software
- IBM Cloud Pak for Security
- CWE-260
- CVSS 7.5 High
IBM Sterling Partner Engagement Manager information disclosure
- IBM Sterling Partner Engagement Manager
- CWE-260
- CVSS 8.7 High
acme.sh: The Docker image from acme.sh before 40b6db6 is based on a…
- acme.sh
- CWE-260
- CVSS 5.5 Medium
IBM Security Verify Bridge information disclosure
- IBM Security Verify Bridge Directory Sync
- CWE-260
- CVSS 4.4 Medium
IBM Security Guardium Key Lifecycle Manager information disclosure
- IBM Security Guardium Key Lifecycle Manager
- CWE-260
-
Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file.
- SonicWall GMS
- SonicWall Analytics
- CWE-260
- CVSS 2.3 Low
TOTOLINK N200RE Telnet Service custom.conf password in configuration file
- TOTOLINK N200RE
- CWE-260
- CVSS 5.9 Medium
Password in config file in KIE server
- CWE-260
<7.21.0.Final · fixed in 7.21.0.Final
GHSA-pjw3-c74j-m9fj · CVE-2016-7043 - CVSS 7.8 High
A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the de…
- Zyxel NBG6818 series firmware
- Zyxel NBG7815 series firmware
- CWE-260
-
MikroTik WinBox: MikroTik WinBox 3.22 and below stores the user's cleartext password in the…
- MikroTik WinBox
- CWE-260
- CVSS 9.1 CriticalCritical · CVSS 9+
Cloud Foundry Container Runtime Leaks IAAS Credentials
- Cloud Foundry Container Runtime (CFCR)
- CWE-260
-
A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX,…
- Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras
- CWE-260
-
A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS…
- Hikvision Cameras
- CWE-260
- CVSS 6.8 Medium
Hospira MedNet Password in Configuration File
- Hospira MedNet
- CWE-260