CVE-2001-1464

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords...

CVE-2005-1166

The CVE-2005-1166 entry concerns DameWare NT Utilities (DNTUS26) and MiniRemote Control (DWRCS) up to version 4.9, where the username and password are stored in memory in plaintext. This in-memory credential exposure could allow a local attacker to obtain sensitive information. The connected sour...

CVE-2005-1166

The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password in cleartext in memory, which could allow attackers to obtain sensitive information...

CVE-2005-0844

CVE-2005-0844 affects Nortel VPN client 5.01, where the cleartext password is stored in the memory of the Extranet.exe process, allowing a local user to access sensitive information. The root cause is insecure in‑memory handling of credentials in Extranet.exe, with a local attack vector and parti...

CVE-2005-0844

Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information...

Nortel VPN client weak encryption

Cleartext password is stored in memory...

CVE-2005-0812

The CVE-2005-0812 issue affects NotifyLink 3.0 where the web interface displays user passwords in cleartext on the administrative page. root cause: passwords are stored and exposed via the admin UI, enabling an attacker with web/admin access or local access to obtain credentials. Impact per sourc...

CVE-2005-0823

The CVE-2005-0823 issue affects ThePoolClub’s games ThePoolClub (1) iPool and (2) iSnooker, version 1.6.81 and earlier, where usernames and passwords are stored in cleartext in the MyDetails.txt file. This local-privilege escalation vulnerability requires local access to read the credentials file...

CVE-2005-0822

Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext (even if obfuscated in UI), enabling users to view secondary passwords contrary to policy. Documented impact is partial disclosure of credentials. The vulnerability details across sources (NVD/CVE records) specify af...

CVE-2005-0822

Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...

CVE-2005-0812

The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information...

CVE-2005-0823

ThePoolClub 1 iPool and 2 iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges...

CVE-2005-0506

The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic...

CVE-2004-1757

BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges...

CVE-2004-1757

CVE-2004-1757 affects BEA WebLogic Server and WebLogic Express 8.1, SP1 and earlier. The issue is that the administrator password is stored in cleartext in config.xml, allowing local users to gain privileges. The vulnerability is rooted in improper password storage on the affected server, with lo...

Insecure GFI Languard Network Security Scanner password storage

Password is stored in memory in cleartext...

Avaya IP Office Phone Manager - Local Password Disclosure

Avaya IP Office Phone Manager - Local Password Disclosure include include include / Filename: exploit.c Title: Avaya IP Office Phone Manager - Cleartext Sensitive Data Vulnerability Exploit v0.01 Author: pagvac Adrian Pastor Date: 24th Feb, 2005 Other info: tested on version 2.013. Compile as a...

Avaya IP Office Phone Manager - Local Password Disclosure

include include include / Filename: exploit.c Title: Avaya IP Office Phone Manager - Cleartext Sensitive Data Vulnerability Exploit v0.01 Author: pagvac Adrian Pastor Date: 24th Feb, 2005 Other info: tested on version 2.013. Compile as a Win32 console application project in Visual C++ / BOOL...

CVE-2005-0506

CVE-2005-0506 affects the Avaya IP Office Phone Manager and related products (e.g., IP Softphone). The issue is that usernames and passwords are stored in cleartext in a registry key (for example Avaya\IP400\Generic), enabling local and potentially remote users to steal credentials and impersonat...

CVE-2005-0506

The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic...