Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-106019

C-CURE 9000 Logging Credential Disclosure Vulnerability

Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System Credentials. This issue affects C-CURE 9000, Victor: 3.20.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Johnson Control Johnsoncontrols
Products
Victor C-cure 9000 Victor
CVE-2020-9045

C•CURE 9000 and victor Video Management System - Cleartext storage of user credentials upon installation or upgrade of software.

During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Johnsoncontrols Tyco
Products
C-cure 9000 Firmware Victor Video Management System