Lucene search
K

35 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:21 a.m.5 views

CVE-2008-6507

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum...

5CVSS6.4AI score0.00375EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-1382

Malware in sbrugna...

5CVSS7.3AI score0.01775EPSS
Exploits0References16
AstraLinux
AstraLinux
added 2024/11/23 3:4 a.m.4 views

Astra Linux - уязвимость в openssh

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry e.g., for su and Sudo because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur...

7.5CVSS7.1AI score0.02949EPSS
Exploits0References3
OSV
OSV
added 2024/07/02 6:15 p.m.2 views

UBUNTU-CVE-2024-39894

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry e.g., for su and Sudo because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur...

7.5CVSS6.3AI score0.02949EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:0 a.m.1 views

The vulnerability of the shadow-utils package, related to incorrect authentication, allows a hacker to gain unauthorized access to user passwords.

The vulnerability of the shadow-utils package is related to the double password request and the lack of buffer memory cleanup. Exploiting this vulnerability can allow an attacker to gain unauthorized access to user passwords...

5.5CVSS6.5AI score0.00015EPSS
Exploits0References9Affected Software6
SUSE CVE
SUSE CVE
added 2023/02/15 6:4 a.m.1 views

SUSE CVE-2009-1384

pamkrb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux RHEL 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

5CVSS7.1AI score0.01775EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/24 5:2 p.m.39 views

Ansible password prompts could expose passwords

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

6.5CVSS6.4AI score0.00382EPSS
Exploits0References12Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 5:52 a.m.12 views

phpBB vulnerable to sensitive information disclosure

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum...

5CVSS6.4AI score0.00375EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2021/08/25 1:30 p.m.1 views

USN-5037-2 firefox regression

USN-5037-1 fixed vulnerabilities in Firefox. The update introduced a regression that caused Firefox to repeatedly prompt for a password. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user wer...

5.9AI score
Exploits0References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.12 views

SUSE: Security Advisory (SUSE-SU-2019:0642-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6AI score0.00748EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2020/04/09 7:23 a.m.30 views

CVE-2019-10206

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

6.5CVSS1.8AI score0.00319EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2019/11/07 1:47 p.m.3 views

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

6.5CVSS6.8AI score0.00319EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2019/11/06 3:27 p.m.2 views

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

6.5CVSS6.8AI score0.00319EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2019/10/24 9:19 p.m.2 views

ansible: Incomplete fix for CVE-2019-10206

The fix for CVE-2019-10206 was found to be incomplete for the data disclosure flaw in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with th...

6.5CVSS6.8AI score0.00382EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2019/10/24 9:19 p.m.2 views

ansible: Incomplete fix for CVE-2019-10206

The fix for CVE-2019-10206 was found to be incomplete for the data disclosure flaw in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with th...

6.5CVSS6.8AI score0.00382EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2019/10/24 8:41 p.m.3 views

ansible: Incomplete fix for CVE-2019-10206

The fix for CVE-2019-10206 was found to be incomplete for the data disclosure flaw in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with th...

6.5CVSS6.8AI score0.00382EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2019/08/21 6:7 p.m.1 views

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

6.5CVSS6.8AI score0.00319EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2019/08/21 6:4 p.m.3 views

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

6.5CVSS6.8AI score0.00319EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2019/08/21 6:3 p.m.1 views

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

6.5CVSS6.8AI score0.00319EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2019/08/21 6:3 p.m.3 views

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

6.5CVSS6.8AI score0.00319EPSS
Exploits0References5
Rows per page
Query Builder