Lucene search
+L

9006 matches found

NVD
NVD
added 2009/06/01 2:30 p.m.20 views

CVE-2008-6818

Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5CVSS6.1AI score0.00901EPSS
SaveExploits0References1
Prion
Prion
added 2009/06/01 2:30 p.m.18 views

Code injection

Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5CVSS6.6AI score0.00901EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2009/06/01 2:00 p.m.48 views

CVE-2008-6817

CVE-2008-6817 affects Mole Group Lastminute Script 4.0 and earlier, where passwords are stored in cleartext. This indicates improper credential storage (cleartext) and can allow context-dependent attackers to obtain sensitive information. The description notes provenance is uncertain and informat...

5CVSS6.2AI score0.00901EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2009/06/01 2:00 p.m.56 views

CVE-2008-6818

The CVE-2008-6818 entry concerns Mole Group Real Estate Script (version 1.1 and earlier) where passwords are stored in cleartext. The root cause is insecure credential storage, enabling context-dependent attackers to obtain sensitive information. The connected documents confirm the existence of t...

5CVSS6.2AI score0.00901EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2009/06/01 2:00 p.m.28 views

CVE-2008-6818

Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

6.1AI score0.00901EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2009/06/01 2:00 p.m.23 views

CVE-2008-6817

Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

6.1AI score0.00901EPSS
SaveExploits0References1
securityvulns
securityvulns
added 2009/05/29 12:00 a.m.70 views

[ MDVSA-2009:123 ] opensc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:123 http://www.mandriva.com/security/ Package : opensc Date : May 27, 2009 Affected: 2009.1 Problem Description: src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-part...

4.3CVSS7.4AI score0.01091EPSS
SaveExploits0
Prion
Prion
added 2009/05/14 5:30 p.m.30 views

Design/Logic Flaw

Application Access Server A-A-S 2.0.48 stores 1 passwords and 2 the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file...

2.1CVSS6.1AI score0.0024EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2009/05/14 5:30 p.m.31 views

CVE-2009-1466

Application Access Server A-A-S 2.0.48 stores 1 passwords and 2 the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file...

5.5CVSS5.1AI score0.0024EPSS
SaveExploits1References5
CVE
CVE
added 2009/05/14 5:00 p.m.68 views

CVE-2009-1466

CVE-2009-1466 affects Application Access Server (A-A-S) 2.0.48, where the passwords and the port keyword are stored in cleartext in aas.ini. Local users reading aas.ini can obtain sensitive data. The issue is caused by insecure password/port storage in the configuration file. Remediation details ...

5.5CVSS4.9AI score0.0024EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2009/05/14 5:00 p.m.52 views

CVE-2009-1466

Application Access Server A-A-S 2.0.48 stores 1 passwords and 2 the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file...

5.1AI score0.0024EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2009/05/14 12:00 a.m.9 views

PT-2009-3967 · A A S · Application Access Server

Name of the Vulnerable Software and Affected Versions: Application Access Server A-A-S version 2.0.48 Description: The issue allows local users to obtain sensitive information, including passwords and the port keyword, by reading the aas.ini file, as this information is stored in cleartext...

5.5CVSS5.1AI score0.0024EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2009/05/11 4:30 p.m.25 views

CVE-2009-1603

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...

7.5CVSS7AI score0.01091EPSS
SaveExploits0References2
Prion
Prion
added 2009/05/11 4:30 p.m.22 views

Code injection

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...

4.3CVSS6.7AI score0.01091EPSS
SaveExploits0References13Affected Software2
OSV
OSV
added 2009/05/11 4:30 p.m.5 views

DEBIAN-CVE-2009-1603

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...

7.5CVSS6.8AI score0.01091EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2009/05/11 4:00 p.m.52 views

CVE-2009-1603

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...

7.3AI score0.01091EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2009/05/11 12:00 a.m.8 views

PT-2009-1081 · Opensc · Opensc

Name of the Vulnerable Software and Affected Versions: OpenSC versions prior to 0.11.8 Description: The issue allows attackers to read the cleartext form of messages that were intended to be encrypted due to incorrect public exponents in generated RSA keys. Exploitation of the vulnerabilities can...

7.5CVSS7.5AI score0.01091EPSS
SaveExploits0References17
NVD
NVD
added 2009/05/07 6:30 p.m.22 views

CVE-2008-6797

The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network...

7.8CVSS6.2AI score0.01698EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2009/05/07 6:00 p.m.35 views

CVE-2008-6797

The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network...

6.2AI score0.01698EPSS
SaveExploits0References3
CVE
CVE
added 2009/05/07 6:00 p.m.59 views

CVE-2008-6797

The CVE-2008-6797 entry concerns Mitel NuPoint Messenger (R11 and R3) where the server sends usernames and passwords in cleartext to Exchange servers, enabling remote attackers to sniff network traffic and obtain sensitive credentials. Red Hat and other sources corroborate the same description. T...

7.8CVSS6.4AI score0.01698EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder