security flaw

The 1 Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the 2 Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a...

Improvements to help protect against Cross-Site Scripting attacks — Mozilla

Firefox 2.0.0.2 and 1.5.0.10 contain several small changes that will make it easier for sites to protect their visitors against Cross-Site Scripting XSS attacks. Invalid trailing characters in HTML tag attributes The Mozilla parser formerly ignored invalid trailing characters in HTML tag attribut...

Apple Safari密码管理器跨站信息泄露漏洞

Apple Safari是一款基于MacOS的web浏览器。 Apple Safari密码管理器存在跨站问题，远程攻击者可以利用漏洞获得密码等敏感信息。 构建恶意页面，由于不正确的源验证，可导致密码管理器自动填充的用户名和密码发送到攻击者指定的地址中。导致用户名和密码信息泄露。 Apple Safari 2.0.4 http://www.apple.com/safari/ http://tearesolutions.com/rcsr-step1.html...

CVE-2006-6077

The 1 Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the 2 Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a...

CVE-2006-6077

The 1 Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the 2 Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a...

CVE-2006-6077

Technical details about CVE-2006-6077 are not provided in the connected documents. The initial description mentions the vulnerability, but no specific vendor/product/version or remediation details are included here. Monitor for updates from authoritative sources.

CVE-2006-6077: Undefined Security Weakness

The 1 Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the 2 Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a...

Firefox password manager form information leak

Password manager doesn't check form destination. It makes it possible for attacker to retrieve saved paramters, including saved login/password if he can insert form into content of the site...

CVE-2006-5161

IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page...

Security flaw in IBM Client Security Password Manager

Hello all, I recently found a security flaw in the design of the IBM Client Security Password Manager an application used to authenticate application forms using fingerprints. It came to my attention that the application only recognized my e-bank site and authed against it if i had just created a...

CVE-2006-5161

The CVE concerns IBM Client Security Password Manager, where saved passwords are distributed based on the title of a website. The underlying issue is a trust/validation weakness: an attacker can obtain credentials by altering the HTML page title, effectively steering the manager to reveal usernam...

CVE-2006-5161: Undefined Security Weakness

IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page...

Vuln: Password Disclosure in Whisper32

Password Disclosure in Whisper32 Vendor: Shaun Ivory http://www.ivory.org Download Location: http://www.ivory.org/whisper.html Versions affected: Whisper32 1.16 and may be prior Date: 13th August 2005 Type of Vulnerability: Information Disclosure in Memory of Process Severity: Medium Solution...

CVE-2004-1902

CVE-2004-1902 affects Citrix MetaFrame Password Manager 2.0. When a central credential store is not configured, passwords entered immediately after the First Time User Wizards are not encrypted, allowing local users to access sensitive information. Impact: partial confidentiality loss for credent...

CVE-2004-1902

The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information...

CVE-2004-1902: Undefined Security Weakness

The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information...

CVE-2005-0822

Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...

CVE-2005-0822

Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext (even if obfuscated in UI), enabling users to view secondary passwords contrary to policy. Documented impact is partial disclosure of credentials. The vulnerability details across sources (NVD/CVE records) specify af...

CVE-2005-0822

Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...

CVE-2005-0822: Undefined Security Weakness

Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...