29 matches found
CVE-2020-7306
The CVE-2020-7306 vulnerability affects McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2. It describes an Unprotected Storage of Credentials issue where ADRMS (and related) usernames and passwords can be read by local users from unprotected log files containing plaintext credentials. Exp...
CVE-2019-7306
CVE-2019-7306 concerns Byobu, where the Apport hook may disclose sensitive information by auto-uploading the local user’s .screenrc (potentially exposing hostnames, usernames, and passwords). The connected OSV/Ubuntu entries confirm Byobu as the affected component and describe the disclosure risk...
CVE-2019-7306 Byobu apport hook uploads user's ~/.screenrc
Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu...
CVE-2016-7306
CVE-2016-7306 entry is rejected and not associated with a vulnerability.
CVE-2017-7306
Riverbed RiOS before version 9.6.1 exposes a weak default password for the secure vault. This weakness can be exploited by physically proximate attackers who know the password algorithm and the appliance serial number, enabling defeat of the secure-vault protection mechanism. Documentation consis...
CVE-2015-7306
Summary: CVE-2015-7306 affects the Drupal CMS Updater module (7.x-1.x) prior to 7.x-1.3. The vulnerability is a permission check bypass on the settings access page, enabling remote authenticated users to view and modify settings by abusing the "access administration pages" permission. Affected so...
CMS Updater - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2015-150
CMS Updater allows to update Drupal core automatically with a subscription service. Access bypass The module does not sufficiently protect the settings page allowing any user with the permission "access administration pages" to change settings. This vulnerability is mitigated by the fact that an...
CVE-2013-7306
CVE-2013-7306: OSPF LSA processing on Brocade routers does not guard against duplicate Link State IDs in LSAs before updating the database, enabling remote users to cause routing disruption (DoS) or glean sensitive packet data via a crafted LSA. This CVE is related to CVE-2013-0149 (OSPF LSA vali...