2383 matches found
PT-2019-6846
Name of the Vulnerable Software and Affected Versions ldap-git-backup versions prior to 1.0.4 Description The issue allows exposure of password hashes due to incorrect directory permissions. Recommendations For versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue. As a...
CVE-2013-1425: Incorrect Default Permissions
ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions...
CVE-2014-9970
A vulnerability was found in Jasypt that would allow an attacker to perform a timing attack on password hash comparison...
PT-2019-4915
Name of the Vulnerable Software and Affected Versions MasterSCADA affected versions not specified Description The issue is related to weaknesses in the password protection mechanism of the project file in the MasterSCADA system. Exploitation of this issue could allow an attacker to gain access to...
WS-2019-0383
In google/nomulus, versions nomulus-20190531-RC00 to nomulus-20191023-RC00, the function “expandRegistrarWithContacts” leaks password hash, and password salt into a file called “updateregistraremail.txt”. This disclosure might be leveraged by a malicious party...
Unspecified vulnerability in cPanel (CNVD-2019-36143)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 11.54.0.4. An attacker can exploit the vulnerability to...
SQLMap v1.3.10 - Automatic SQL Injection And Database Takeover Tool
SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...
CVE-2019-16116
EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash...
CVE-2019-16116
EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash...
Information disclosure
EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash...
CVE-2019-16116
CVE-2019-16116 affects EnterpriseDT CompleteFTP Server prior to version 12.1.3, where the Bootstrap.log file could leak the administrator password hash. Public sources describe a path where installation logging obscures the password, enabling an attacker to obtain credentials if remote administra...
CVE-2019-16116: Use of a Broken or Risky Cryptographic Algorithm
EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash...
PT-2019-14520
Name of the Vulnerable Software and Affected Versions EnterpriseDT CompleteFTP Server versions prior to 12.1.3 Description The issue allows an attacker to obtain the administrator password hash due to information exposure in the Bootstrap.log file. Recommendations For EnterpriseDT CompleteFTP...
CVE-2019-15087
An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution...
CVE-2019-15088
An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication...
CVE-2019-15088
An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication...
CVE-2019-13922
A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect...
CVE-2019-13922
A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect...
CVE-2019-13922: Missing Encryption of Sensitive Data
A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect...