ContentKeeper information leak

HTML web administration page contains administrator's password in cleartext...

CVE-2006-4744

Abidia 1 O-Anywhere and 2 Abidia Wireless transmit authentication credentials in cleartext, which allows remote attackers to obtain sensitive information by sniffing...

CVE-2006-4744

Abidia 1 O-Anywhere and 2 Abidia Wireless transmit authentication credentials in cleartext, which allows remote attackers to obtain sensitive information by sniffing...

CVE-2006-4744

Technical details (affected product, component, version, root cause, exploitability) are not publicly available in the provided documents; monitor for updates.

Canon ImageRunner information leak

During address book export with web inteface different password types are visible in cleartext...

VMware ESX Server management interface logs passwords in cleartext in a world-readable file

Overview Certain versions of VMware ESX Server store passwords in a cleartext file that all users have read permissions to. Description Per the VMware ESX Server datasheet:ESX Server installs directly on the server hardware, or “bare metal,” and inserts a robust virtualization layer between the...

Multiple Novell eDirectory security vulnerabilities

Remote Denial of Service, cleartext password in log files...

Multiple Informix security vulnerabilities

Buffer overflow on oversized username. Information leak. Cleartext passwords. Buffer overflows, DoS. CREATE DATABASE privilege escalation. Multiple code execution vulnerabilities. File access...

VMWare ESX Server crossite scripting and password leak

Management Interface crossite scripting. Additionally, cleartext password is contained in session cookie and server log files...

CVE-2005-3620

The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges...

CVE-2005-3620

CVE-2005-3620 affects VMware ESX Server: versions 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 store passwords in cleartext in URLs that are logged in world-readable web server logs. This enables local users to view passwords and potentially gain privileges...

CVE-2006-3816

Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote connections in cleartext in the bookmark file krbookmarks.xml, which allows attackers to steal passwords by obtaining the file...

CVE-2006-3834

EJ3 TOPo 2.2.178 is affected: the product stores the password in cleartext in the ID field used by index.php, enabling context-dependent attackers to obtain entry passwords via log files, referrers, or similar vectors. The available sources (NVD/NVD listing) describe this plaintext password expos...

Opsware Network Automation System weak permissions

/etc/init.d/mysqll init script contains MySQL 'root' account password in cleartext...

CVE-2006-3816

Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote connections in cleartext in the bookmark file krbookmarks.xml, which allows attackers to steal passwords by obtaining the file...

CVE-2006-3816

Krusader

CVE-2006-3816

Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote connections in cleartext in the bookmark file krbookmarks.xml, which allows attackers to steal passwords by obtaining the file...

Low: Red Hat Bug Fix Advisory: conga bug fix update

Updated conga packages that provide critical bug fixes are now available. The Conga package is a web-based administration tool for remote cluster and storage management. This erratum applies the following bug fixes: - The borrowed Zope packages used by Conga have been patched to eliminate a...

Finjan Appliance cleartext password

ps.fdb.bak file contains Firebird database server password...

CVE-2006-2719

JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HRStaff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords...