CVE-2006-4614

PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry under HKEY_CURRENT_USER\Software\PDAapps\VeriChat. This enables local users to obtain sensitive credentials from the registry, representing a local-attack exposure with plaintext crede...

CVE-2006-4615

Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file...

CVE-2006-4615

The CVE documents a vulnerability in Shape Services IM+ Mobile Instant Messenger for Pocket PC, version 3.10, where usernames and passwords are stored in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg. This local-access issue allows a user with file-read privileges to obtain credentials. Affected ...

CVE-2006-4186

The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file...

CVE-2006-4186

The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file...

CVE-2006-4186

The CVE-2006-4186 entry pertains to Novell eDirectory 8.7.3.8 where the iManager in eMBoxClient.jar writes passwords in plaintext to a log file. This creates a local information disclosure risk: local users can read the log file to obtain passwords. The affected component is the iManager inside e...

CVE-2006-3858

IBM Informix Dynamic Server IDS before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory product defects 171893, 171894, 173772...

CVE-2006-3858

IBM Informix Dynamic Server IDS before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory product defects 171893, 171894, 173772...

CVE-2006-3858

CVE-2006-3858 affects IBM Informix Dynamic Server (IDS) prior to 9.40.xC8 and 10.00 prior to 10.00.xC4. The flaw causes passwords to be stored in plaintext in a shared memory region, enabling local users to read memory and obtain passwords. Affected products include IDS versions before the stated...

CVE-2006-3663

Finjan Vital Security Appliance 5100/8100 NG 8.3.5 stores passwords in plaintext in a backup file, which allows local users to gain privileges. NOTE: the vendor has notified CVE that this issue was fixed in 8.3.6...

CVE-2006-3663

Finjan Vital Security Appliance 5100/8100 NG 8.3.5 stores passwords in plaintext in a backup file, which allows local users to gain privileges. NOTE: the vendor has notified CVE that this issue was fixed in 8.3.6...

CVE-2006-3663

CVE-2006-3663 affects Finjan Vital Security Appliance 5100/8100 NG; 8.3.5 stores passwords in plaintext in a backup file, allowing local users to gain privileges. The vendor has notified CVE that this issue was fixed in 8.3.6. Remediation: upgrade to 8.3.6 (or later) to mitigate. The impact is lo...

CVE-2006-3286

The internal database in Cisco Wireless Control System WCS for Linux and Windows before 3.263 stores a hard-coded username and password in plaintext within unspecified files, which allows remote authenticated users to access the database aka bug CSCsd15951...

PT-2006-4099 · Upb · Ultimate Php Board

Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.9.6 and earlier Description: The issue allows remote attackers to determine a suitable decryption key given the plaintext and ciphertext. This is achieved by obtaining the plaintext password, which is sent wh...

CVE-2005-2462

Kayako LiveResponse 2.x is affected by a vulnerability where, during user login, the password is recorded in plaintext in the URL. This enables local users and possibly remote attackers to gain privileges and access sensitive information. The issue is discussed across multiple sources, and relate...

Design/Logic Flaw

membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts...

CVE-2006-2733

membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts...

CVE-2006-2733

membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts...

CVE-2006-2733

CVE-2006-2733 affects Mini-Nuke 2.3 and earlier. The issue is in membership.asp where plaintext security codes are used, allowing remote attackers to register multiple times via automated scripts. The connected documents confirm the product/version range and the vulnerability mechanism; no mitiga...

Code injection

WebSphere Application Server 5.0.2 or any earlier cumulative fix stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges...