CVE-2012-0863

Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file...

CVE-2012-0863

Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file...

CVE-2012-0863

Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file...

CVE-2012-0863

CVE-2012-0863 affects Mumble up through version 1.2.3 where the client stores its data in the file ~/.local/share/data/Mumble/.mumble.sqlite with world-readable permissions. This allows a local attacker to read the database and obtain cleartext passwords and configuration data. Multiple distribut...

CVE-2012-1923

RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under admbdb\users, which allows local users to obtain sensitive information by reading a database...

Design/Logic Flaw

RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under admbdb\users, which allows local users to obtain sensitive information by reading a database...

CVE-2012-1923

RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under admbdb\users, which allows local users to obtain sensitive information by reading a database...

CVE-2012-1923

CVE-2012-1923 affects RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x. The issue is caused by storing credentials in cleartext in the flat-file database under adm_b_db\users, enabling local users to read sensitive passwords. Impact is disclosure of credentials with partial co...

Fedora Update for krb5 FEDORA-2011-16296

Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2011-16296 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CVE-2012-1838

The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and consequently obtain cleartext credential and configuration information, via a direct request to a configuration web page...

Authentication flaw

The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and consequently obtain cleartext credential and configuration information, via a direct request to a configuration web page...

CVE-2012-1838

CVE-2012-1838 affects the LG-Nortel ELO GS24M switch. The web management interface allows remote attackers to bypass authentication and access cleartext credentials and configuration information by directly requesting a configuration web page. This is reflected in the NVD entry (base score 5.0, C...

CVE-2012-1838

The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and consequently obtain cleartext credential and configuration information, via a direct request to a configuration web page...

Unfamiliar street plaintext submit the registration information of the plaintext transmission-vulnerability warning-the black bar safety net

Unfamiliar Street is Beijing, unfamiliar street Technology Co., Ltd. launched a location-based mobile social products. Its login authentication using a cleartext user ID and password. Detailed description: Unfamiliar Street is Beijing, unfamiliar street Technology Co., Ltd. launched a...

Cache: NonManagedConnectionFactory will log password in clear text when an exception occurs

The NonManagedConnectionFactory in JBoss Enterprise Application Platform EAP 5.1.2 and 5.2.0, Web Platform EWP 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by readi...

Debian DSA-2399-2 : php5 - several vulnerabilities

Several vulnerabilities have been discovered in PHP, the web scripting language. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-1938 The UNIX socket handling allowed attackers to trigger a buffer overflow via a long path name. - CVE-2011-2483 The...

Fedora Update for krb5 FEDORA-2011-16284

Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2011-16284 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 15 Update: krb5-1.9.2-4.fc15

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...

Default credentials

The Kaixin001 com.kaixin001.activity application 1.3.1 and 1.3.3 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a cleartext password via a crafted application...

CVE-2011-4866

The Kaixin001 com.kaixin001.activity application 1.3.1 and 1.3.3 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a cleartext password via a crafted application...