Lucene search
+L

8976 matches found

CVE
CVE
added 2020/02/10 12:19 p.m.64 views

CVE-2019-20061

The CVE describes a vulnerability in MFScripts YetiShare (versions 3.5.2–4.5.4) where the user introduction email may disclose the system-generated initial password if sent in cleartext. Root cause: the initial password is not user-chosen, and sending it in plaintext enables leakage. Impact noted...

7.5CVSS7.5AI score0.009EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/02/10 12:19 p.m.41 views

CVE-2019-20061

The user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the system-picked password if this email is sent in cleartext. In other words, the user is not allowed to choose their own initial password...

7.5AI score0.009EPSS
SaveExploits0References3
NVD
NVD
added 2020/02/10 1:15 a.m.29 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS8.1AI score0.0135EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/10 1:15 a.m.17 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

8.1CVSS7AI score
SaveExploits0References1
OSV
OSV
added 2020/02/10 1:15 a.m.13 views

DEBIAN-CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

8.1CVSS7.9AI score0.0135EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/02/10 1:15 a.m.45 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS7.2AI score0.0135EPSS
SaveExploits0References3
Prion
Prion
added 2020/02/10 1:15 a.m.22 views

Code injection

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS8AI score0.0135EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/02/10 12:30 a.m.36 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

8.1AI score0.0135EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/08 6:15 p.m.11 views

DEBIAN-CVE-2012-4381

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, 1 which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, 2 when an authentication plugin returns a false in the strict function, could allow remo...

8.1CVSS7.8AI score0.04061EPSS
SaveExploits0References1
Prion
Prion
added 2020/02/08 6:15 p.m.15 views

Authentication flaw

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, 1 which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, 2 when an authentication plugin returns a false in the strict function, could allow remo...

9.3CVSS7AI score0.04061EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2020/02/08 6:15 p.m.9 views

UBUNTU-CVE-2012-4381

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, 1 which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, 2 when an authentication plugin returns a false in the strict function, could allow remo...

8.1CVSS7AI score0.04061EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2020/02/08 5:50 p.m.28 views

CVE-2012-4381

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, 1 which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, 2 when an authentication plugin returns a false in the strict function, could allow remo...

9.3CVSS7.5AI score0.04061EPSS
SaveExploits0
NVD
NVD
added 2020/02/05 9:15 p.m.19 views

CVE-2013-2680

Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information...

7.5CVSS7.5AI score0.08728EPSS
SaveExploits5References3
Prion
Prion
added 2020/02/05 9:15 p.m.24 views

Information disclosure

Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information...

5CVSS7AI score0.08728EPSS
SaveExploits5References3Affected Software1
CVE
CVE
added 2020/02/05 8:47 p.m.67 views

CVE-2013-2680

CVE-2013-2680 affects Cisco Linksys E4200 firmware 1.0.05 Build 7. The issue is that device passwords are stored in cleartext, enabling remote attackers to obtain sensitive information. This information disclosure vulnerability is documented in multiple sources (NVD entry and related records). Th...

7.5CVSS7.6AI score0.08728EPSS
SaveExploits5References3Affected Software1
Cvelist
Cvelist
added 2020/02/05 8:47 p.m.34 views

CVE-2013-2680

Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information...

7.6AI score0.08728EPSS
SaveExploits5References3
NVD
NVD
added 2020/02/03 5:15 p.m.17 views

CVE-2013-2672

Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords...

7.5CVSS7.7AI score0.01665EPSS
SaveExploits2References2
Prion
Prion
added 2020/02/03 5:15 p.m.17 views

Design/Logic Flaw

Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords...

5CVSS7.3AI score0.01665EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2020/02/03 4:39 p.m.66 views

CVE-2013-2672

CVE-2013-2672 affects Brother MFC-9970CDW devices running firmware 0D, where passwords may be submitted in cleartext. The NVD entry documents a network-remote risk with cleartext credential exposure (CVSS v3.1 base score 7.5, high impact on confidentiality; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). N...

7.5CVSS7.6AI score0.01665EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2020/02/03 4:39 p.m.27 views

CVE-2013-2672

Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords...

7.6AI score0.01665EPSS
SaveExploits2References2
Rows per page
Query Builder