CVE-2026-15479: Weak Password Recovery Mechanism for Forgotten Password

A vulnerability was found in H3C NX15 V100R017. Affected by this vulnerability is the function changepasswd of the file /api/login/modify of the component Administrator Password Modification Endpoint. The manipulation of the argument newPass results in weak password recovery. The attack may be...

Information Disclosure

libshadow.so is vulnerable to Information Disclosure. The vulnerability exists in changepasswd function at gpasswd.c because the password field is not properly zeroed out if the confirmation fails...

CVE-2004-0524

Buffer overflow in the chpasswd command in the Changepasswd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name...