2175 matches found
The vulnerability of the Linux operating system’s kernel allows a hacker to obtain information about other users’ passwords.
The vulnerability of the proc/interrupts file in Linux operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to obtain information about the password length, and then use statistical analysis methods to determine the exact...
CVE-2016-0287
IBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified vectors...
The vulnerability of the Zyxel ZLD operating system allows a remote attacker to escalate their privileges.
Exploiting a vulnerability in the operating system of the Zyxel ZyWALL USG 300 network interface card allows a malicious actor to upload and download device configuration files without additional authentication. As a result, the malicious actor can view or modify the administrator’s password...
The vulnerability of the microprogramming software of the D–Link DSR–500 router allows a malicious individual to obtain the user password.
To store passwords, the DES encryption algorithm with a salt is used. This results in a password length limitation of 8 characters the remaining characters are discarded...
Vulnerability of the 1C-Bitrix web project management system: The website management feature allows a remote attacker to obtain a reset password for any user, as well as the user’s own password.
Vulnerability of the 1C-Bitrix web project management system: Website management related to errors in the code of the pseudo-random number generator mtrand. Exploiting this vulnerability allows an unauthorized attacker to obtain confirmation codes for resetting passwords of any user, as well as t...
BDCOM Boda BSR2800-08C Multiservice Router has a Design Flaw Vulnerability
BDCOM BODA BSR2800-08C Multi-Service Router is a new generation of switched multi-service router platform developed by Shanghai BODA Data Communication Co. The platform adopts 64-bit multi-core processor + high-speed switching engine + FPGA supporting design scheme with excellent performance. A...
Fusion K2 Wireless Router Override Read Configuration File Vulnerability
The Fusion K2 Wireless Router is a wireless router for home use. The Fusion K2 Wireless Router is vulnerable to an override read configuration file vulnerability. Since Fusion K2 can read the configuration file which contains the password of the logged-in device without logging in, it can illegal...
Cisco Nexus 9000 Series Software Password Exposure Vulnerability (Cisco-SA-20150623-CVE-2015-4213)
A vulnerability in Cisco Nexus 9000 Series Software could allow an authenticated, remote attacker to expose passwords in plain text format. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
samba: SAMR and LSA man in the middle attacks
A protocol flaw, publicly referred to as Badlock, was found in the Security Account Manager Remote Protocol MS-SAMR and the Local Security Authority Domain Policy Remote Protocol MS-LSAD. Any authenticated DCE/RPC connection that a client initiates against a server could be used by a...
samba: SAMR and LSA man in the middle attacks
A protocol flaw, publicly referred to as Badlock, was found in the Security Account Manager Remote Protocol MS-SAMR and the Local Security Authority Domain Policy Remote Protocol MS-LSAD. Any authenticated DCE/RPC connection that a client initiates against a server could be used by a...
samba: SAMR and LSA man in the middle attacks
A protocol flaw, publicly referred to as Badlock, was found in the Security Account Manager Remote Protocol MS-SAMR and the Local Security Authority Domain Policy Remote Protocol MS-LSAD. Any authenticated DCE/RPC connection that a client initiates against a server could be used by a...
samba: SAMR and LSA man in the middle attacks
A protocol flaw, publicly referred to as Badlock, was found in the Security Account Manager Remote Protocol MS-SAMR and the Local Security Authority Domain Policy Remote Protocol MS-LSAD. Any authenticated DCE/RPC connection that a client initiates against a server could be used by a...
samba: SAMR and LSA man in the middle attacks
A protocol flaw, publicly referred to as Badlock, was found in the Security Account Manager Remote Protocol MS-SAMR and the Local Security Authority Domain Policy Remote Protocol MS-LSAD. Any authenticated DCE/RPC connection that a client initiates against a server could be used by a...
appcms 2.0.101版本 密码明文泄露
No description provided by source...
SUSE-SU-2016:0304-1 Security update for libvirt
libvirt was updated to fix one security issue and several non-security issues. This security issue was fixed: - CVE-2015-0236: libvirt allowed remote authenticated users to obtain the VNC password by using the VIRDOMAINXMLSECURE flag with a crafted 1 snapshot to the virDomainSnapshotGetXMLDesc...
jenkins: password exposure in DOM (SECURITY-138)
Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM...
DEBIAN-CVE-2015-8749
The volumeutils.parsevolumeinfo function in OpenStack Compute Nova before 2015.1.3 kilo and 12.0.x before 12.0.1 liberty includes the connectioninfo dictionary in the StorageError message when using the Xen backend, which might allow attackers to obtain sensitive password information by reading l...
UBUNTU-CVE-2015-8749
The volumeutils.parsevolumeinfo function in OpenStack Compute Nova before 2015.1.3 kilo and 12.0.x before 12.0.1 liberty includes the connectioninfo dictionary in the StorageError message when using the Xen backend, which might allow attackers to obtain sensitive password information by reading l...
WL-330NUL Information Disclosure Vulnerability
The WL-330NUL is a portable wireless LAN router offered by ASUS Japan. The WL-330NUL suffers from an information disclosure vulnerability. It allows attackers to discover WPA2-PSK passwords using unspecified vectors...
CVE-2015-7404
IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server aka Spectrum Protect for Databases 5.5 before 5.5.6.2, 6.3 before 6.3.1.6, 6.4 before 6.4.1.8, and 7.1 before 7.1.4; Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server aka Spectrum Prote...