Lucene search
+L

187 matches found

NVD
NVD
added 2007/02/23 3:28 a.m.17 views

CVE-2006-7037

Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the worksheet with a text editor or other program, which allows attackers to 1 bypass password protection by replacing the password field with a hash of a known...

4.4CVSS6.3AI score0.00317EPSS
Exploits0References6
NVD
NVD
added 2006/10/17 3:7 p.m.19 views

CVE-2006-5303

Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading 1 base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and 2 plaintext data in SERVERS\Shared\signers.cfg. NOTE: the...

2.1CVSS5.9AI score0.00203EPSS
Exploits0References3
CVE
CVE
added 2006/09/13 10:0 p.m.40 views

CVE-2006-4745

The CVE-2006-4745 entry concerns ScaryBear PocketExpense Pro 3.9.1, where an internally recorded key protects a data file whose contents are stored in plaintext. The underlying issue allows local users to bypass authentication and access the file by modifying a value in the file header. This is a...

3.6CVSS6.6AI score0.00422EPSS
Exploits1References3Affected Software1
Snyk
Snyk
added 2005/08/23 4:0 a.m.2 views

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials. SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the knownhosts file, which makes it easier for an attacker that...

2.9CVSS8.1AI score0.01177EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2005/08/23 12:0 a.m.12 views

PT-2005-3554 · Openssh +2 · Openssh +2

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 4.0 Description: The issue allows an attacker that has compromised an SSH user's account to more easily generate a list of additional targets that are more likely to have the same password or key. This is because...

10CVSS7.9AI score0.99506EPSS
Exploits208References345
Cvelist
Cvelist
added 2002/05/03 4:0 a.m.18 views

CVE-2002-0259

InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in 1 .pwd files in the miniportal/apache directory, or 2 mplog.txt, which could allow local users to gain privileges...

6.5AI score0.00385EPSS
Exploits0References4
securityvulns
securityvulns
added 2002/02/12 12:0 a.m.46 views

InstantServers MiniPortal Multiple Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= InstantServers MiniPortal Multiple Vulnerabilities =- Release date: Saturday, February 9, 2002 Introduction: InstantServers' MiniPortal provides a complete solution for fast and easy web site hosting on a Windows PC. It features a Apache-...

0.5AI score
Exploits0
Rows per page
Query Builder