CVE-2013-5006

maininternet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16, and the N900 and N900C with firmware 1.05.12, 1.06.18, and 1.06.28, allows remote attackers to discover the cleartext administrative password by reading the "var pass=" line within the HTML source code...

CVE-2013-5006

The CVE-2013-5006 issue affects Western Digital My Net Series Wireless Routers (N600, N750, N900, N900C) across several firmwares (N600/N750: 1.03.12, 1.04.16; N900/N900C: 1.05.12, 1.06.18, 1.06.28). The vulnerability is an information disclosure in the web server: the admin password is stored in...

CVE-2013-4873

The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

Design/Logic Flaw

The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-4873

The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-4873

CVE-2013-4873 : The Yahoo! Tumblr app for iOS prior to 3.4.1 transmits credentials in cleartext, allowing remote attackers to obtain sensitive information by sniffing network traffic. The provided sources describe the vulnerability and its impact (partial confidentiality) and confirm remote explo...

CVE-2013-3273

EMC RSA Authentication Manager 8.0 before P2 and 7.1 before SP4 P26, as used in Appliance 3.0, does not omit the cleartext administrative password from trace logging in custom SDK applications, which allows local users to obtain sensitive information by reading the trace log file...

Multiple Asus Router Directory Traversal Vulnerability

The remote Asus router is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4614

English/pagesMacUS/wlssetcontent.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows the Wi-Fi PSK passphrase in cleartext, which allows physically proximate attackers to obtain sensitive information by reading the screen of an unattended...

Design/Logic Flaw

English/pagesMacUS/wlssetcontent.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows the Wi-Fi PSK passphrase in cleartext, which allows physically proximate attackers to obtain sensitive information by reading the screen of an unattended...

CVE-2013-4614

The CVE-2013-4614 entry affects Canon printers MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922. The issue is that the printer’s web admin interface reveals the configured Wi‑Fi PSK in cleartext after it has been entered, allowing a physically proximate attacker to read the pa...

Default credentials

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory...

CVE-2013-0534

Affected software: IBM Sametime Connect Client (versions 8.5.1 to 8.5.2.x as described) used with Lotus Notes client. Issue: Information disclosure via persistence of cleartext password strings in process memory. Root cause (as described): password data stored in memory in cleartext, enabling loc...

CVE-2013-0534

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory...

CVE-2012-4960

The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AROEM IN, AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300,...

CVE-2013-0148

The Data Camouflage aka FairCom Standard Encryption algorithm in FairCom c-treeACE does not ensure that a decryption key is needed for accessing database contents, which allows context-dependent attackers to read cleartext database records by copying a database to another system that has a certai...

Design/Logic Flaw

EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a 1 log file or 2 configuration file...

CVE-2013-0947

EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a 1 log file or 2 configuration file...

Passwords of configured SMTP mail accounts are stored in cleartext

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-29534. panel Passwords for configured mail accounts are stored in clear text in the database as can be seen e.g. by: code SELECT...

CVE-2013-3497

Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...