8431 matches found
OpenVMS multiple security vulnerabilities
HP DecNet-Plus undisclosured vulnerability, cleartext password in log files...
CVE-2006-5867
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle MITM attacks...
CVE-2006-5867
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle MITM attacks...
DEBIAN-CVE-2006-5867
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle MITM attacks...
CVE-2006-6258
The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might allow remote attackers to obtain the password by sniffing or by conducting a cross-site scripting XSS attack...
CVE-2006-6258
The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might allow remote attackers to obtain the password by sniffing or by conducting a cross-site scripting XSS attack...
CVE-2006-6258
The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might allow remote attackers to obtain the password by sniffing or by conducting a cross-site scripting XSS attack...
CVE-2006-6258
Affected software: AlternC 0.9.5 and earlier. Issue: the phpmyadmin subsystem transmits the SQL password in cleartext in a cookie, allowing potential exposure through network sniffing or a cross-site scripting (XSS) attack. Consequences: complete confidentiality and integrity impacts (per CVSS). ...
CVE-2006-5018
ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI...
CVE-2006-5018
ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI...
CVE-2006-5018
ContentKeeper 123.25 and earlier stores passwords in cleartext in an INPUT element within cgi-bin/ck/changepw.cgi, enabling remote authenticated users to obtain passwords via that URI. The vuln is exploitable over network with low complexity and requires authentication, leading to partial confide...
ContentKeeper information leak
HTML web administration page contains administrator's password in cleartext...
CVE-2006-4744
Abidia 1 O-Anywhere and 2 Abidia Wireless transmit authentication credentials in cleartext, which allows remote attackers to obtain sensitive information by sniffing...
CVE-2006-4744
Technical details (affected product, component, version, root cause, exploitability) are not publicly available in the provided documents; monitor for updates.
CVE-2006-4744
Abidia 1 O-Anywhere and 2 Abidia Wireless transmit authentication credentials in cleartext, which allows remote attackers to obtain sensitive information by sniffing...
Canon ImageRunner information leak
During address book export with web inteface different password types are visible in cleartext...
VMware ESX Server management interface logs passwords in cleartext in a world-readable file
Overview Certain versions of VMware ESX Server store passwords in a cleartext file that all users have read permissions to. Description Per the VMware ESX Server datasheet:ESX Server installs directly on the server hardware, or “bare metal,” and inserts a robust virtualization layer between the...
Multiple Novell eDirectory security vulnerabilities
Remote Denial of Service, cleartext password in log files...
Multiple Informix security vulnerabilities
Buffer overflow on oversized username. Information leak. Cleartext passwords. Buffer overflows, DoS. CREATE DATABASE privilege escalation. Multiple code execution vulnerabilities. File access...