CVE-2013-4967

Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes...

Design/Logic Flaw

Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes...

CVE-2013-4967

Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes...

CVE-2013-4967

Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes...

CVE-2013-4967

Puppet Enterprise before 3.0.1 is vulnerable to an information-disclosure path that allows remote attackers to obtain the database password. The root cause involves how the password is seeded as a console parameter, combined with misconfigurations around External Node Classifiers and lack of acce...

PT-2013-5311

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 3.0.1 Description The issue allows remote attackers to obtain the database password due to how the password is seeded as a console parameter, related to External Node Classifiers, and the lack of access...

CVE-2013-4967: Undefined Security Weakness

Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes...

CVE-2012-4952

Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation...

Information disclosure

Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation...

PT-2013-1736

Name of the Vulnerable Software and Affected Versions Henry Schein Dentrix G5 versions prior to 15.1.294 Description The issue allows remote attackers to obtain sensitive patient information by exploiting a shared internal-database password across different customers' installations. Recommendatio...

CVE-2012-4952: Undefined Security Weakness

Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation...

Encrypt Database Password in dbconfig.xml or use integrated authentication

panel:title=Atlassian Update – 5 January 2016|borderStyle=solid|borderColor=ebf2f9 | titleBGColor=ebf2f9 | bgColor=ffffff Hi everyone, Thanks for voting and commenting on this issue. While we understand the importance of this issue for our customers with strict password encryption requirements, w...

CVE-2009-2899

The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments...

CVE-2009-2899

The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments...

Shoot off piikee auction website system injection vulnerability and fix-vulnerability warning-the black bar safety net

Because there are no manufacturers, just write a bidding system to it, came out good to With this system webmasters mind you. The system is called: shoot off piikee auction website system Why say 2B? The reception is all the files the parameter values are such, we see this code newsarc.php ? php...

Webmaster content Alliance background Cookie spoofing exploit-vulnerability warning-the black bar safety net

Webmaster content Alliance is domestic the most widely used of a thief program, but its background verification is not strictly, by the cookie trick, you can bypass the authentication directly into the background, get a webshell in. Website content Alliance, presumably most webmasters are aware o...

Prewikka weak permissions

Weak permission for configuration file with database password...

Fenghua classmates 2. 0 official version of injection vulnerabilities-vulnerability warning-the black bar safety net

| /TeacherList. asp? Action=ViewDetail&ID=3 Background SysAdmLogin. asp Attachment: Fenghua classmates to the system's default information is as follows: Front Desk verification will default to User name: fenghua Password: txlbbs. 1 2 6 A background verify will default to Username: kissinger...

CVE-2010-3244

BbtsConnectionEdit.exe in Blackboard Transact Suite formerly Blackboard Commerce Suite before 3.6.0.2 relies on field names when determining whether it is appropriate to decrypt a connection.xml field value, which allows local users to discover the database password via a modified connection.xml...

Design/Logic Flaw

BbtsConnectionEdit.exe in Blackboard Transact Suite formerly Blackboard Commerce Suite before 3.6.0.2 relies on field names when determining whether it is appropriate to decrypt a connection.xml field value, which allows local users to discover the database password via a modified connection.xml...