8425 matches found
CVE-2005-0822
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...
CVE-2005-0812
The CVE-2005-0812 issue affects NotifyLink 3.0 where the web interface displays user passwords in cleartext on the administrative page. root cause: passwords are stored and exposed via the admin UI, enabling an attacker with web/admin access or local access to obtain credentials. Impact per sourc...
CVE-2005-0812
The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information...
CVE-2005-0823
ThePoolClub 1 iPool and 2 iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges...
CVE-2005-0823
The CVE-2005-0823 issue affects ThePoolClub’s games ThePoolClub (1) iPool and (2) iSnooker, version 1.6.81 and earlier, where usernames and passwords are stored in cleartext in the MyDetails.txt file. This local-privilege escalation vulnerability requires local access to read the credentials file...
CVE-2005-0822
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext (even if obfuscated in UI), enabling users to view secondary passwords contrary to policy. Documented impact is partial disclosure of credentials. The vulnerability details across sources (NVD/CVE records) specify af...
CVE-2005-0506
The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic...
CVE-2004-1757
CVE-2004-1757 affects BEA WebLogic Server and WebLogic Express 8.1, SP1 and earlier. The issue is that the administrator password is stored in cleartext in config.xml, allowing local users to gain privileges. The vulnerability is rooted in improper password storage on the affected server, with lo...
CVE-2004-1757
BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges...
Insecure GFI Languard Network Security Scanner password storage
Password is stored in memory in cleartext...
Avaya IP Office Phone Manager - Local Password Disclosure
Avaya IP Office Phone Manager - Local Password Disclosure include include include / Filename: exploit.c Title: Avaya IP Office Phone Manager - Cleartext Sensitive Data Vulnerability Exploit v0.01 Author: pagvac Adrian Pastor Date: 24th Feb, 2005 Other info: tested on version 2.013. Compile as a...
Avaya IP Office Phone Manager - Local Password Disclosure
include include include / Filename: exploit.c Title: Avaya IP Office Phone Manager - Cleartext Sensitive Data Vulnerability Exploit v0.01 Author: pagvac Adrian Pastor Date: 24th Feb, 2005 Other info: tested on version 2.013. Compile as a Win32 console application project in Visual C++ / BOOL...
CVE-2005-0506
The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic...
CVE-2005-0506
CVE-2005-0506 affects the Avaya IP Office Phone Manager and related products (e.g., IP Softphone). The issue is that usernames and passwords are stored in cleartext in a registry key (for example Avaya\IP400\Generic), enabling local and potentially remote users to steal credentials and impersonat...
CVE-2004-1549
The CVE affects ActivePost Standard 3.1: the conference menu transmits passwords for password-protected rooms in cleartext, enabling a network observer to capture sensitive credentials. No explicit remediation details are provided in the connected documents; exploitation specifics (or patches) ar...
CVE-2004-1549
The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection...
CVE-2005-0346
The CVE-2005-0346 entry concerns SafeNet SoftRemote VPN Client, where the VPN pre-shared key/password is stored in cleartext in memory within the IreIKE.exe process. This creates a local-access data exposure: any user with access to the IreIKE.exe process can read the password. The vulnerability ...
CVE-2005-0346
SafeNet SoftRemote VPN Client stores the VPN password pre-shared key in cleartext in memory of the IreIKE.exe process, which allows local users to gain sensitive information if they have access to that process...