8810 matches found
CVE-2014-0786
CVE-2014-0786 affects Ecava IntegraXor SCADA Server prior to 4.1.4393. The issue is an improper privilege/guest access flaw that allows remote attackers to read cleartext administrative credentials via SELECT statements executed with the guest role, leading to information disclosure. Affected pro...
RSA Access Manager information leakage
Cleartext passwords may be logged...
CVE-2014-2014
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network...
CVE-2014-2014
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network...
CVE-2014-2014
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network...
Design/Logic Flaw
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network...
CVE-2014-2014
imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network...
CVE-2014-2014
CVE-2014-2014 affects imapsync prior to 1.584 when using --tls: on certificate verification failure it may fall back to a cleartext login, risking credentials sniffed over the network. Public sources (NVD) document a CVSS v2 base score of 4.3 (Medium) with network attack vector and no authenticat...
CommonSpot < 7.0.2 / 8.0.3 / 9.0.0 Multiple Vulnerabilities
According to its version number, the CommonSpot install hosted on the remote web server is affected by multiple vulnerabilities : - An access restriction bypass via a direct request. CVE-2014-2859 - Multiple cross-site scripting XSS vulnerabilities. CVE-2014-2860, CVE-2014-2861 - Improper...
CVE-2014-2870
The default configuration of PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 uses cleartext for storage of credentials in a database, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified vectors...
Default configuration
The default configuration of PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 uses cleartext for storage of credentials in a database, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified vectors...
CVE-2014-2870
The default configuration of PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 uses cleartext for storage of credentials in a database, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified vectors...
CVE-2014-0347
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...
Design/Logic Flaw
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...
CVE-2014-0347
The CVE-2014-0347 vulnerability affects Websense Triton Unified Security Center 7.7.3 (and related Websense suites) prior to Hotfix 31. In the Settings module, the Log Database and User Directories areas fail to sanitize input, allowing an authenticated user to change an input field from type="pa...
CVE-2014-0347
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...
CVE-2014-0920
IBM SPSS Analytic Server versions 1.0.0.0 (before IF002) and 1.0.1.0 (before IF004) are affected by CVE-2014-0920, which causes logs to contain passwords in plaintext, allowing authenticated remote users to obtain sensitive information via unspecified vectors. The vulnerability is addressed by IB...
CVE-2014-0920
IBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2014-2212
The remember me feature in portal/scrauthentif.php in POSH aka Posh portal or Portaneo 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers to obtain sensitive information by reading this cookie...
Default credentials
The remember me feature in portal/scrauthentif.php in POSH aka Posh portal or Portaneo 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers to obtain sensitive information by reading this cookie...