Lucene search
+L

9006 matches found

NVD
NVD
added 2009/07/10 5:30 p.m.28 views

CVE-2009-2429

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in adminbackup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

4.6CVSS6.4AI score0.00293EPSS
SaveExploits1References3
Prion
Prion
added 2009/07/10 5:30 p.m.21 views

Information disclosure

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in adminbackup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

4.6CVSS6.9AI score0.00293EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2009/07/10 5:00 p.m.61 views

CVE-2009-2429

McAfee SmartFilter (Web Gateway Security) 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insecure file permissions, enabling local users to gain privileges via access to those files. Affected component/file: admin_backup.xml (within SmartFilter Administration/ser...

4.6CVSS6.5AI score0.00293EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2009/07/10 5:00 p.m.32 views

CVE-2009-2429

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in adminbackup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

6.4AI score0.00293EPSS
SaveExploits1References3
NVD
NVD
added 2009/07/02 10:30 a.m.26 views

CVE-2009-2312

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges...

4.6CVSS6.6AI score0.00293EPSS
SaveExploits1References3
Prion
Prion
added 2009/07/02 10:30 a.m.24 views

Design/Logic Flaw

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges...

4.6CVSS7.1AI score0.00293EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2009/07/02 10:00 a.m.31 views

CVE-2009-2312

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges...

6.6AI score0.00293EPSS
SaveExploits1References3
CVE
CVE
added 2009/07/02 10:00 a.m.64 views

CVE-2009-2312

McAfee SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for that file, enabling local attackers to gain privileges. The SEBUG entry additionally cites the credentials and plaintext passwords located under c:\Program Files\S...

4.6CVSS6.8AI score0.00293EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2009/07/01 1:00 p.m.27 views

CVE-2009-2272

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

7.5CVSS7.5AI score0.00644EPSS
SaveExploits0References1
Prion
Prion
added 2009/07/01 1:00 p.m.25 views

Design/Logic Flaw

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

5CVSS6.9AI score0.00644EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2009/07/01 12:26 p.m.31 views

CVE-2009-2272

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

7.5AI score0.00644EPSS
SaveExploits0References1
CVE
CVE
added 2009/07/01 12:26 p.m.62 views

CVE-2009-2272

CVE-2009-2272 concerns the Huawei D100 where the administrator’s account name and password are stored in cleartext in a cookie. The underlying issue enables context-dependent attackers to obtain sensitive information by reading a cookie file or sniffing HTTP headers, with other vectors possible. ...

7.5CVSS7.4AI score0.00644EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2009/07/01 12:00 a.m.13 views

PT-2009-4708 · Huawei · Huawei D100

Name of the Vulnerable Software and Affected Versions: Huawei D100 affected versions not specified Description: The issue allows context-dependent attackers to obtain sensitive information, specifically the administrator's account name and password, which are stored in cleartext in a cookie...

7.5CVSS7.4AI score0.00644EPSS
SaveExploits0References3
Prion
Prion
added 2009/06/08 7:30 p.m.23 views

Design/Logic Flaw

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server...

4.3CVSS7.2AI score0.00248EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2009/06/08 7:30 p.m.27 views

CVE-2008-6828

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server...

7.8CVSS7.8AI score0.00248EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2009/06/08 7:00 p.m.36 views

CVE-2008-6828

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server...

7.8AI score0.00248EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2009/06/05 12:00 a.m.21 views

Mandrake Security Advisory MDVSA-2009:123 (opensc)

The remote host is missing an update to opensc announced via advisory MDVSA-2009:123. OpenVAS Vulnerability Test $Id: mdksa2009123.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:123 opensc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

4.3CVSS7.5AI score0.01091EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2009/06/05 12:00 a.m.44 views

Mandrake Security Advisory MDVSA-2009:123 (opensc)

The remote host is missing an update to opensc announced via advisory MDVSA-2009:123. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

7.5CVSS7.5AI score0.01091EPSS
SaveExploits0References1
Prion
Prion
added 2009/06/01 2:30 p.m.12 views

Design/Logic Flaw

Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5CVSS6.6AI score0.00901EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2009/06/01 2:30 p.m.15 views

CVE-2008-6817

Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5CVSS6.1AI score0.00901EPSS
SaveExploits0References1
Rows per page
Query Builder