8935 matches found
CVE-2005-2395
Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available...
ECI router login bypass
Title: ECI router verification bypass and DoS Date: 24/07/2005 Impact: Log in verification bypass Vendors Status: Not contacted they were mean to me Overview: The B-FOCuS Router 312+ provides users with a reliable and secured ADSL2+ connection to the Internet. The 312+ has a single Ethernet port...
Oracle JDeveloper Plaintext Passwords
Name Oracle JDeveloper Plaintext Passwords Systems Affected Oracle JDeveloper 9.0.4, 9.0.5, 10.1.2 Severity Low Risk Category Information Disclosure of Passwords Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 13 July 2005 V 1.00 Advisory...
Name Oracle JDeveloper passes Plaintext Password
Name Oracle JDeveloper passes Plaintext Password Systems Affected Oracle JDeveloper 9.0.4, 9.0.5, 10.1.2 Severity Low Risk Category Information disclosure of Passwords Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 12 July 2005 V 1.00 Advisory...
EUVD-2005-2226
Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so...
CVE-2005-2227
Softiacom wMailserver 1.0 is affected by a vulnerability where passwords are stored in plaintext in the Darsite\MAILSRV\Admin registry key, enabling local users to gain administrator privileges. The issue is a local privilege escalation due to insecure credential storage. According to the provide...
CVE-2005-2227
Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to gain administrator privileges...
CVE-2005-2227
Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to gain administrator privileges...
CVE-2005-2225
The CVE-2005-2225 entries describe a DoS condition in Microsoft MSN Messenger where remote attackers can cause users to be kicked from group conversations by sending a plaintext message containing the string ".pif". Gaim is also reported affected, suggesting the issue could be in the protocol or ...
CVE-2005-2225
Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so...
PT-2005-3154 · Gaim +1 · Gaim +1
Name of the Vulnerable Software and Affected Versions: Microsoft MSN Messenger affected versions not specified Gaim affected versions not specified Description: The issue allows remote attackers to cause a denial of service by sending a plaintext message containing the ".pif" string. This string ...
CVE-2004-2172
EarlyImpact ProductCart is affected by a vulnerability where passwords are encrypted with a weak scheme, enabling remote attackers to obtain passwords through a chosen-plaintext attack. Affected versions are not clearly specified in the provided documents. The available sources do not indicate a ...
CVE-2002-1939
FlashFXP 1.4 stores FTP passwords in plaintext in the queue properties, which can be exposed when queue transfers are present. This allows an attacker who can edit the queue to obtain other users’ FTP credentials. The issue is documented in CVE-2002-1939 and echoed across multiple sources (NVD/Re...
CVE-2002-1800
The CVE-2002-1800 issue affects phpRank version 1.8, where the administrative password is stored in plaintext on the server and in the ap cookie. This design allows remote attackers to retrieve the administrative password, compromising admin access. The Red Hat entry and PT-7500-series advisory c...
CVE-2002-1800
phpRank 1.8 stores the administrative password in plaintext on the server and in the "ap" cookie, which allows remote attackers to retrieve the administrative password...
CVE-2002-1939
FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties...
whoiscartInsert.txt
Subject: Saeven.net's WhoisCart all versions released prior to this disclosure is vulnerable in that it allows an attacker to insert Javascript into user viewed pages, and also to view any world readable file on the server hosting the WhoisCart software. Severity: Severe; These vulnerabilities ca...
CVE-2002-1762
MBSA 1.0 stores security scans in plaintext at C:\Documents and Settings\username\SecurityScans, potentially exposing sensitive system information to users able to run malicious ActiveX/Java content. The provided sources confirm the exact location and plaintext storage, with no additional exploit...
CVE-2001-1481
Xitami 2.4–2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose permissions are world-readable, enabling remote attackers to gain privileges. Affected versions: Xitami 2.4–2.5 b4. Root cause: plaintext password storage with insecure default file permissions. Impact...