Lucene search
+L

3504 matches found

OSV
OSV
•added 2007/07/26 10:30 p.m.•8 views

DEBIAN-CVE-2007-4029

libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via 1 an invalid mapping type, which triggers an out-of-bounds read in the vorbisinfoclear function in info.c, and 2 invalid blocksize values that trigger a segmentation faul...

6.8CVSS6.8AI score0.01666EPSS
SaveExploits0References1
Symantec
Symantec
•added 2007/05/09 8:00 a.m.•20 views

Symantec pcAnywhere Remote User Credential Disclosure

SUMMARY Symantec pcAnywhere fails to properly protect remote user credentials stored in memory. Risk Impact Low Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Products | Versions ---|--- Symantec pcAnywhere | 11.5.x No...

1.3AI score
SaveExploits0Affected Software1
myhack58
myhack58
•added 2007/04/18 12:00 a.m.•32 views

Easily crack open the Lost Password laptop-vulnerability warning-the black bar safety net

For laptops, it is best not easily set a password, because the laptop's boot password is not like a PC that stored in CMOS circuit can through the discharge clear, at the moment a new laptop is the password stored on the motherboard of a few blocks of the logic circuit, our personal is not...

0.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/04/13 12:00 a.m.•237 views

Steganos Encrypted Safe NOT so safe

Sometimes greed can be the downfall of the greatest people and nations but in this case it's software. Steganos Encrypted File safe for Windows is one of the most commonly used file security systems in the world. They boast how excellent their encryption and how uncrackable they are. This is...

0.3AI score
SaveExploits0
seebug.org
seebug.org
•added 2007/02/07 12:00 a.m.•36 views

solaris/sparc connect-back (with XNOR encoded session) 600 bytes

No description provided by source. / black-RXenc-con-back-SOLARIS.c MIPS This is a relitivly small 600 byte shellcode that encodes all network trafic between the exploited process and the attacker. All clear-text shell i/o is encoded using a simple NOT algo before being transmitted on the wire...

7.1AI score
SaveExploits0
NVD
NVD
•added 2006/10/12 8:07 p.m.•24 views

CVE-2006-4813

The blockpreparewrite function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked...

2.1CVSS7.2AI score0.00414EPSS
SaveExploits0References18
Cvelist
Cvelist
•added 2006/05/22 5:00 p.m.•38 views

CVE-2006-2185

PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges...

7AI score0.01616EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2006/04/13 10:00 a.m.•35 views

CVE-2005-4777

Tashcom ASPEdit 2.9 stores the administration password aka the FTP password in cleartext in the registry, which might allow local users to view the password...

6.4AI score0.00455EPSS
SaveExploits1References4
securityvulns
securityvulns
•added 2006/03/30 12:00 a.m.•47 views

[SA19455] Samba Exposure of Machine Account Credentials

TITLE: Samba Exposure of Machine Account Credentials SECUNIA ADVISORY ID: SA19455 VERIFY ADVISORY: http://secunia.com/advisories/19455/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Samba 3.x http://secunia.com/product/2999/ DESCRIPTION: A securit...

1.2CVSS0.4AI score0.00475EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2006/03/26 12:00 a.m.•29 views

Cheops NG clear text authentication

A Cheops NG agent is running on the remote host. Description : Cheops NG is running on this port. Users with a valid account on this machine can connect to this service and use it to map your network, port scan machines and identify running services. Passwords are transmitted in clear text and...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2006/03/26 12:00 a.m.•27 views

Cheops NG clear text authentication

A Cheops NG agent is running on the remote host. Users with a valid account on this machine can connect to this service and use it to map the network, port scan machines and identify running services. Passwords are transmitted in clear text and could be sniffed. More, using this Cheops agent, it ...

7.3AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2005/12/31 5:00 a.m.•33 views

CVE-2005-4828

Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this migh...

6.4CVSS5.9AI score0.01282EPSS
SaveExploits1References1
NVD
NVD
•added 2005/12/31 5:00 a.m.•23 views

CVE-2005-4777

Tashcom ASPEdit 2.9 stores the administration password aka the FTP password in cleartext in the registry, which might allow local users to view the password...

4.9CVSS6.4AI score0.00455EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•27 views

TheServer clear text password

We were able to read the server.ini file It may contain sensitive information like clear text passwords. This flaw is known to affect TheServer. OpenVAS Vulnerability Test $Id: theservercleartext.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: TheServer clear text password Authors: Michel...

5CVSS6.1AI score0.01901EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•46 views

TheServer clear text password

We were able to read the server.ini file It may contain sensitive information like clear text passwords. This flaw is known to affect TheServer. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

5CVSS6.2AI score0.01901EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2005/10/10 12:00 a.m.•60 views

[SA17117] aeNovo Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: aeNovo Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17117 VERIFY ADVISORY: http://secunia.com/advisories/17117/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: aeNovo...

0.5AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/10/01 12:00 a.m.•33 views

Macromedia Breeze information leak

"reset password" feature stores password in clear text...

2AI score
SaveExploits0References1Affected Software1
Symantec
Symantec
•added 2005/09/02 8:00 a.m.•24 views

Local LiveUpdate server username / password information revealed by client

SUMMARY Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- LiveUpdate Client | 2.7 | 34 | LiveUpdate Client Update ADDITIONAL PRODUCT INFORMATION...

0.7AI score
SaveExploits0Affected Software1
securityvulns
securityvulns
•added 2005/08/31 12:00 a.m.•34 views

[Full-disclosure] ELSA Lancom Router Discloses the Administrator Password to Remote Users

It is reported that the default configuration allows a remote user to connect to the router via port 80 with a web browser and obtain the remote access password, which is apparently stored in clear text. The remote user can also change the router's configuration and can remotely upgrade the...

2.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/08/14 12:00 a.m.•49 views

Vuln: Password Disclosure in Whisper32

Password Disclosure in Whisper32 Vendor: Shaun Ivory http://www.ivory.org Download Location: http://www.ivory.org/whisper.html Versions affected: Whisper32 1.16 and may be prior Date: 13th August 2005 Type of Vulnerability: Information Disclosure in Memory of Process Severity: Medium Solution...

0.1AI score
SaveExploits0
Rows per page
Query Builder