55 matches found
Design/Logic Flaw
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discover accounts via MySQL "select from Administratorusers" and "select from Usersusers" requests...
CVE-2020-6371
User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP POWL test application versions - 710, 711, 730, 731, 740, 750, leading to Information Disclosure...
CVE-2020-3921
UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...
Security Bulletin: IBM Flex System Manager (FSM) and compatible IBM Systems Director agents are affected by vulnerabilities in OpenSSL (CVE-2013-4353, CVE-2013-6450, and CVE-2013-6449)
Summary An interface on the IBM BladeCenter Advanced Management Module AMM may expose user account names and passwords that have been configured on that AMM. Vulnerability Details Abstract The FSM and compatible agents contain a version of openssl that contained the 3 vulnerabilities listed above...
LXCA User Account Names Exposed To Unauthenticated Users Who Can Access the Web User Interface - lu
Lenovo Security Advisory: LEN-16335 Potential Impact: LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3764 Summary Description: A vulnerability was identified in...
Adult FriendFinder Vulnerability Leaves 400 Million Exposed
Account data for more than 400 million users of adult-themed FriendFinder Network has been exposed. The breach includes personal account data from five sites including Adult FriendFinder, Penthouse.com and Stripshow.com. FriendFinder Network did not confirm the breach and is investigating reports...
Information Disclosure Vulnerability in Feta Firewall
Fortinet is a multi-layered threat defense system. An information disclosure vulnerability exists in the Fita Firewall. In HTTP mode, the login interface and the administrator create an account, using plaintext transmission, and no mandatory requirements for weak passwords are made when creating ...
Unspecified Vulnerability in USAA Mobile Banking Application
USAA Mobile Banking application for Android is a suite of USAA mobile banking applications for the Android platform. A security vulnerability exists in versions of the USAA Mobile Banking application for Android platform prior to 7.10.1, which stems from the program displaying the most recently...
Design/Logic Flaw
PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by reading this file...
[SA19455] Samba Exposure of Machine Account Credentials
TITLE: Samba Exposure of Machine Account Credentials SECUNIA ADVISORY ID: SA19455 VERIFY ADVISORY: http://secunia.com/advisories/19455/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Samba 3.x http://secunia.com/product/2999/ DESCRIPTION: A securit...
[Full-disclosure] TowerBlog <= 0.6 Admin Account View [x0n3-h4ck]
-=--------------------ADVISORY-------------------=- -= =- -= TowerBlog = 0.6 =- -= =- -= Author: CorryL x0n3-h4ck.org =- -= =- -=-----------------------------------------------------=- -=+ Application: TowerBlog -=+ Version: 0.6 -=+ Vendor's URL: http://tower.hybryd.org/?x=home -=+ Platform:...
[Full-Disclosure] Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password)
Arhont Ltd. - Information Security Arhont Advisory by: Konstantin Gavrilenko http://www.arhont.com Advisory: cleartext account password obtainable using SNMP Class: design/configuration bug Test platform: BT Voyager 2000 Wireless ADSL Router Vendor Contact Date: 10/06/2004 PD release date:...
Several vulnerabilities found in PHPNuke
Janek Vind "waraxe" reports that several issues in the PHPNuke software may be exploited via carefully crafted URL requests. These URLs will permit the injection of SQL code, cookie theft, and the readability of the PHPNuke administrator account...
OS/400 - User Account Name Disclosure
source: https://www.securityfocus.com/bid/4059/info AS/400 is a midrange computer platform developed by IBM. It is designed to be highly reliable and efficient, and uses the OS/400 operating system. An information disclosure vulnerability has been reported to exist in OS/400 systems. An...
