https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 12:07:13 +0000 https://cve.radiocsirt.org/vuln/cve-2020-5899 <p><strong>Affected:</strong> NGINX Controller</p> <p>In NGINX Controller 3.0.0-3.4.0, recovery code required to change a user&#39;s password is transmitted and stored in the database in plain text, which allows an attacker who can intercept the database connection or have read access to the database, to request a password reset using the email address of another registered user then retrieve the recovery code.</p> <p><strong>Affected:</strong> NGINX Controller</p> <p>In NGINX Controller 3.0.0-3.4.0, recovery code required to change a user&#39;s password is transmitted and stored in the database in plain text, which allows an attacker who can intercept the database connection or have read access to the database, to request a password reset using the email address of another registered user then retrieve the recovery code.</p> https://cve.radiocsirt.org/vuln/cve-2020-5899