CVE-2004-2436

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges...

Novell GroupWise client memory cleartext passwords

Cahed password is stored cleartext in memory...

CVE-2003-1225

The vulnerability CVE-2003-1225 affects BEA WebLogic Server and Express 7.0 and 7.0.0.1, where the default CredentialMapper stores passwords in cleartext on disk, enabling local users to extract passwords. The related Nessus entry corroborates a local-access information disclosure risk, including...

CVE-2005-2586

Mentor ADSL-FR4II router running firmware 2.00.0111 stores the web administration password in cleartext in the backup configuration file, which allows local users to obtain sensitive information...

CVE-2003-1222

CVE-2003-1222 affects BEA WebLogic Express/Server 8.0–8.1 SP1 when using a foreign JMS provider. The underlying issue is that the system echoes the foreign provider password to the console and stores it in cleartext in config.xml, enabling an attacker to obtain the password. The description does ...

CVE-2005-2586

The CVE concerns a Mentor ADSL-FR4II router with firmware 2.00.0111 that stores the web administration password in cleartext inside the backup configuration file. This exposes sensitive credentials to local users who can access the backup config, enabling partial confidentiality impact as describ...

CVE-2003-1225

The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords...

CVE-2005-2586

Mentor ADSL-FR4II router running firmware 2.00.0111 stores the web administration password in cleartext in the backup configuration file, which allows local users to obtain sensitive information...

CVE-2003-1224

BEA WebLogic Server/Express 7.0 and 7.0.0.1 are affected by CVE-2003-1224 due to a bug in the JDBCConnectionPoolRuntimeMBean where the password is displayed on screen in cleartext. This allows local observers to read a user’s password via shoulder surfing. The vulnerability is classified with a l...

Whisper passwords manager cleartext password

Passwords are visible in cleartext in process memory. Password for password store is not used in ecnryption, allowing to restore passwords from password file...

Multiple Mentor ADSL router vulnerabilities

Undocumented Web-interface TCP/5678, no passwords in default configuration, DoS, cleartext passwords in configuration file...

Microsoft Windows Kerberos PKINIT Man In The Middle Vulnerability

Description The PKINIT implementation in Microsoft Windows is susceptible to a man in the middle vulnerability. This issue is due to a failure of the software to properly validate network data. This issue is only exploitable by attackers that have access to valid logon credentials. Attackers...

Microsoft ActiveSync multiple vulnerabilities

During synchronization with broadcast media LAN or Wi-Fi all data, including authentication is sent cleartext and it's possible to spoof client or server. It's possible to access device without password, DoS...

Trillian instant messenger cleartext passwords leak

Yahoo Mail passwords are stored in common place with in cleartext...

Mozilla cleartext credentials leak bug report to excuse myself (Re[2]: NTLM HTTP Authentication is insecure by design - a new writeup by Amit Klein)

Dear Amit Klein AKsecurity, --Tuesday, July 19, 2005, 10:22:59 PM, you wrote to [email protected]: AKA For example, no-one expects NTLM auth to protect data in transit. Actually, it may with NTLM Session Security. AKA Few years ago Internet Explorer was patched to use NTLM authentication on...

CVE-2005-2291

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information...

CVE-2005-2292

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in 1 IDEConnections.xml, 2 XSQLConfig.xml and 3 settings.xml, which allows local users to obtain sensitive information...

CVE-2005-2292

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in 1 IDEConnections.xml, 2 XSQLConfig.xml and 3 settings.xml, which allows local users to obtain sensitive information...

CVE-2005-2291

Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information...

CVE-2005-2292

CVE-2005-2292 : Oracle JDeveloper versions 9.0.4, 9.0.5, and 10.1.2 store cleartext passwords in IDEConnections.xml, XSQLConfig.xml, and settings.xml. The issue allows local users to obtain sensitive information from these configuration files. The connected documents confirm the affected products...