Vulnerabilities (CVE)

Filtered by CWE-257
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-32519 2024-11-21 N/A 8.0 HIGH
A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. Affected Products: Data Center Expert (Versions prior to V7.9.0)
CVE-2021-27485 1 Zoll 1 Defibrillator Dashboard 2024-11-21 5.0 MEDIUM 7.5 HIGH
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser.
CVE-2024-20462 1 Cisco 4 Ata 191, Ata 191 Firmware, Ata 192 and 1 more 2024-10-31 N/A 5.5 MEDIUM
A vulnerability in the web-based management interface of Cisco ATA 190 Series Multiplatform Analog Telephone Adapter firmware could allow an authenticated, local attacker with low privileges to view passwords on an affected device. This vulnerability is due to incorrect sanitization of HTML content from an affected device. A successful exploit could allow the attacker to view passwords that belong to other users.