tronlink records
2 published records for vendor tronlink.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-532 Insertion of Sensitive Information into Log File1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2019-13096No exploit | TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage.tronlink · wallet · CWE-312 | Critical9.8 | — | 1.1% | Jul 22, 2019 |
26Monitor | CVE-2019-13098No exploit | The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called.tronlink · wallet · CWE-532 | Medium6.5 | — | 1.3% | Jul 22, 2019 |
- CVE-2019-1309639Monitor
TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage.
CriticalCVSS 9.8No exploitEPSS 1%tronlink · walletJul 22, 2019
- CVE-2019-1309826Monitor
The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called.
MediumCVSS 6.5No exploitEPSS 1%tronlink · walletJul 22, 2019