CVE-2010-4213

The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...

CVE-2010-4214

The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...

Security feature bypass

The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...

CVE-2010-4214

CVE-2010-4214 affects the Wells Fargo Mobile app for Android (version 1.1). The vulnerability is that the application stores a user’s username, password, and account balances in cleartext, which could allow physically proximate attackers to read sensitive data from the app’s data stores. The prov...

CVE-2010-4213

The CVE-2010-4213 entry concerns the Bank of America Android app version 2.12, where a security question’s answer is stored in cleartext. This storage allows physically proximate attackers to read sensitive data from the application data. The available connected documents confirm the affected sof...

CVE-2010-4213

The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...

CVE-2010-4214

The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...

CVE-2010-4184

CVE-2010-4184 affects NetSupport Manager (NSM) prior to version 11.00.0005. The vulnerability arises from NSM sending HTTP headers with cleartext fields that reveal details about client machines, enabling an attacker who can sniff network traffic to obtain potentially sensitive information (e.g.,...

CVE-2010-4184

NetSupport Manager NSM before 11.00.0005 sends HTTP headers with cleartext fields containing details about client machines, which allows remote attackers to obtain potentially sensitive information by sniffing the network...

CVE-2010-3584

Unspecified vulnerability in the Oracle VM component in Oracle VM 2.2.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims fro...

Buffer overflow

Unspecified vulnerability in the Oracle VM component in Oracle VM 2.2.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims fro...

CVE-2010-3584

Unspecified vulnerability in the Oracle VM component in Oracle VM 2.2.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ovs-agent. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims fro...

[SECURITY] Fedora 14 Update: krb5-1.8.2-6.fc14

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...

CVE-2010-3318

IBM Records Manager RM 4.5.x before 4.5.1.1-IER-FP001 transmits passwords in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...

Design/Logic Flaw

IBM Records Manager RM 4.5.x before 4.5.1.1-IER-FP001 transmits passwords in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2010-3318

CVE-2010-3318 affects IBM Records Manager (RM) 4.5.x prior to 4.5.1.1-IER-FP001. The vulnerability arises from transmitting passwords in cleartext, enabling remote attackers to sniff sensitive information over the network. The connected Red Hat/ENISA resources and the NVD entry confirm the affect...

CVE-2010-3318

IBM Records Manager RM 4.5.x before 4.5.1.1-IER-FP001 transmits passwords in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...

Design/Logic Flaw

The automated-backup functionality in Blackboard Transact Suite formerly Blackboard Commerce Suite stores the 1 database username and 2 database password in cleartext in a script and b batch .bat files, which allows local users to obtain sensitive information by reading a file...

CVE-2010-3245

The automated-backup functionality in Blackboard Transact Suite formerly Blackboard Commerce Suite stores the 1 database username and 2 database password in cleartext in a script and b batch .bat files, which allows local users to obtain sensitive information by reading a file...

CVE-2010-3245

The CVE-2010-3245 entry concerns Blackboard Transact Suite (formerly Blackboard Commerce Suite). The vulnerability arises from the automated-backup functionality, which stores the database username and database password in cleartext within (a) script and (b) batch (.bat) files. This exposes sensi...