2142 matches found
CVE-2005-1745
The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password...
CVE-2005-1745
The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier for attackers to guess the correct password...
Software PBLang 4.63 sendpm.php reply file read vulnerability
HRG - Hackerlounge Research Group Release: HRG008 Monday 03/01/05 Software PBLang 4.63 sendpm.php reply file read The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.63 and earlier?...
Konversation: Various vulnerabilities
Background Konversation is a user-friendly IRC client for KDE. Description Wouter Coekaerts has discovered three vulnerabilities within Konversation: The Server::parseWildcards function, which is used by the "Quick Buttons", does not properly handle variable expansion CAN-2005-0129. Perl scripts...
CVE-2004-2414
Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the 1 NIOUTPUT.TXT and 2 NI.LOG log files, which might allow local users to obtain the passwords...
CVE-2004-2718
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords via a direct request...
CVE-2004-2172
EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack...
2bgalSQL.txt
2Bgal 2.5.1 SQL injection Vulnerability http://www.ben3w.com/ 12/22/2004 ---------------------------------------------------------------------- Description: ---------------------------------------------------------------------- 2Bgal is fully customizable photo gallery. It's seems to be vulnerabl...
Fedora Core 2 : kdelibs-3.2.2-10.FC2 (2004-548)
Tue Dec 14 2004 Than Ngo 6:3.2.2-10.FC2 - apply the patch to fix Konqueror Window Injection Vulnerability 142510 CVE-2004-1158, Thanks to KDE security team - Security Advisory: plain text password exposure, 142487 thanks to KDE security team - Tue Sep 07 2004 Than Ngo 6:3.2.2-9.FC2 - add patch to...
Fedora Core 3 : kdebase-3.3.1-4.3.FC3 (2004-551)
Tue Dec 14 2004 Than Ngo 6:3.3.1-4.3.FC3 - apply the patch to fix Konqueror Window Injection Vulnerability 142510 CVE-2004-1158, Thanks to KDE security team - Fri Dec 10 2004 Than Ngo 6:3.3.1-4.2.FC3 - Security Advisory: plain text password exposure, thanks to KDE security team - the existing...
Fedora Core 3 : kdelibs-3.3.1-2.4.FC3 (2004-550)
Tue Dec 14 2004 Than Ngo 3.3.1-2.4.FC3 - apply the patch to fix Konqueror Window Injection Vulnerability 142510 CVE-2004-1158, Thanks to KDE security team - Fri Dec 10 2004 Than Ngo 3.3.1-2.3.FC3 - Security Advisory: plain text password exposure, 142487 thanks to KDE security team Note that...
Fedora Core 2 : kdebase-3.2.2-8.FC2 (2004-549)
Tue Dec 14 2004 Than Ngo 3.2.2-8.FC2 - apply the patch to fix Konqueror Window Injection Vulnerability 142510 CVE-2004-1158, Thanks to KDE security team - Security Advisory: plain text password exposure, 142487 thanks to KDE security team - Tue Sep 28 2004 Than Ngo 6:3.2.2-7.FC2 - fix kdm...
Sharepoint 2003 installation fails and account password revealed in setup log
System tested/affected: WSS, SharePoint 2003 - Hebrew localized version Details: I have a domain user account which has a complex password, including a leading dash -. After installing SPS components which includes WSS, I was prompted to enter database access account, at which point I entered the...
[Full-Disclosure] Webroot Spy Sweeper Enterprise Adminpassord open to the world
Not sure if this list is the right place for this....... Spy Sweeper Enterprise from webroot http://www.webroot.com/products/spysweeper/enterprise/ leaves the admin password in plain site you can find it by going to HKEYLOCALMACHINESOFTWAREWebrootEnterpriseSpy Sweeperap This can be done from the...
3COM Wireless router (3CRADSL72) information disclosure
The router gives you a web page with user name, password, primary and secondary DNS, default gateway, etc, if you access http://routerIP/appsta.stm without athentification of any kind. Router details: Runtime Code Version 1.05 Jan 27 2004 14:58:25 Boot Code Version V1.3d Hardware Version 01A ADSL...
Debian DSA-338-1 : proftpd - SQL injection
runlevel [email protected] reported that ProFTPD's PostgreSQL authentication module is vulnerable to a SQL injection attack. This vulnerability could be exploited by a remote, unauthenticated attacker to execute arbitrary SQL statements, potentially exposing the passwords of other users, or t...
CVE-2001-1098
Cisco PIX firewall manager PFM 4.32g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file...
WS_FTP Pro Client Weak Password Encrypted
The version of WSFTP client installed on the remote host uses a weak encryption method to store password information. A local attacker could exploit this to discover FTP passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14597; scriptversion"1.15";...