Vulnerabilities > Insufficiently Protected Credentials

DATE CVE VULNERABILITY TITLE RISK
2018-11-20 CVE-2018-12038 Insufficiently Protected Credentials vulnerability in Samsung 840 EVO Firmware
An issue was discovered on Samsung 840 EVO devices.
high complexity
samsung CWE-522
4.2
2018-11-07 CVE-2018-19078 Insufficiently Protected Credentials vulnerability in multiple products
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.
network
low complexity
opticam foscam CWE-522
critical
9.8
2018-10-29 CVE-2018-18754 Insufficiently Protected Credentials vulnerability in Zyxel Vmg3312-B10B Firmware 1.00(Aapp.7)
ZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file.
network
low complexity
zyxel CWE-522
critical
9.8
2018-10-26 CVE-2018-18656 Insufficiently Protected Credentials vulnerability in Purevpn
The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext.
local
low complexity
purevpn CWE-522
7.8
2018-10-24 CVE-2018-9280 Insufficiently Protected Credentials vulnerability in Eaton 9PX UPS Firmware
An issue was discovered on Eaton UPS 9PX 8000 SP devices.
network
low complexity
eaton CWE-522
4.9
2018-10-24 CVE-2018-9279 Insufficiently Protected Credentials vulnerability in Eaton 9PX UPS Firmware
An issue was discovered on Eaton UPS 9PX 8000 SP devices.
network
low complexity
eaton CWE-522
4.9
2018-10-18 CVE-2018-11079 Insufficiently Protected Credentials vulnerability in EMC Secure Remote Services
Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability.
local
low complexity
emc CWE-522
7.8
2018-10-18 CVE-2018-12383 Insufficiently Protected Credentials vulnerability in multiple products
If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible.
local
low complexity
redhat debian canonical mozilla CWE-522
5.5
2018-10-17 CVE-2018-10824 Insufficiently Protected Credentials vulnerability in Dlink products
An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices.
network
low complexity
dlink CWE-522
critical
9.8
2018-10-12 CVE-2018-17900 Insufficiently Protected Credentials vulnerability in Yokogawa products
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for remote access to controllers.
network
low complexity
yokogawa CWE-522
critical
9.8