Lucene search
+L

11002 matches found

NVD
NVD
•added 2012/10/31 10:50 a.m.•23 views

CVE-2012-4610

EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client...

3.3CVSS6.4AI score0.00618EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2012/10/31 10:00 a.m.•40 views

CVE-2012-4610

EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to the proxy client...

6.4AI score0.00618EPSS
SaveExploits1References3
securityvulns
securityvulns
•added 2012/10/30 12:00 a.m.•52 views

EMC Avamar Client for VMware weak encryption

Server access password is stored locally in cleartext...

3.3CVSS2.4AI score0.00618EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2012/10/18 5:55 p.m.•28 views

CVE-2012-2284

The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...

2.1CVSS6.1AI score0.00333EPSS
SaveExploits0References5
Prion
Prion
•added 2012/10/18 5:55 p.m.•22 views

Code injection

The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...

2.1CVSS6.6AI score0.00333EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2012/10/18 5:00 p.m.•39 views

CVE-2012-2284

The 1 install and 2 upgrade processes in EMC NetWorker Module for Microsoft Applications NMM 2.2.1, 2.3 before build 122, and 2.4 before build 375, when Exchange Server is used, allow local users to read cleartext administrator credentials via unspecified vectors...

6.1AI score0.00333EPSS
SaveExploits0References5
securityvulns
securityvulns
•added 2012/10/04 12:00 a.m.•65 views

STARTTLS vulnerability in different mail applications

Atacker can inject cleartext commands before TLS phase...

6.8CVSS2.7AI score0.33341EPSS
SaveExploits1References3Affected Software4
Tenable Nessus
Tenable Nessus
•added 2012/10/03 12:00 a.m.•58 views

Mandriva Linux Security Advisory : inn (MDVSA-2012:156)

A security issue was identified and fixed in ISC INN : The STARTTLS implementation in INN's NNTP server for readers, nnrpd, before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command tha...

6.8CVSS8.2AI score0.03233EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/10/03 12:00 a.m.•63 views

Mandriva Update for inn MDVSA-2012:156 (inn)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS8.5AI score0.16334EPSS
SaveExploits1References2
NVD
NVD
•added 2012/09/20 9:55 p.m.•22 views

CVE-2012-3734

Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...

1.9CVSS5.6AI score0.00188EPSS
SaveExploits0References4
Prion
Prion
•added 2012/09/20 9:55 p.m.•27 views

Design/Logic Flaw

Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...

1.9CVSS5.9AI score0.00188EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2012/09/20 9:00 p.m.•34 views

CVE-2012-3734

Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...

5.6AI score0.00188EPSS
SaveExploits0References4
securityvulns
securityvulns
•added 2012/09/03 12:00 a.m.•124 views

Group-Office Cleartext Credentials Stored in Cookies

/------------------------------------------------------ | Group-Office Cleartext Credentials Stored in Cookies | ------------------------------------------------------/ Summary ======= Group-Office 4.0.71 was found to display a behaviour that could potentially expose a user's username and clearte...

5.8AI score
SaveExploits0
NVD
NVD
•added 2012/08/29 10:55 p.m.•25 views

CVE-2012-3312

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

5CVSS5.9AI score0.02072EPSS
SaveExploits0References4
Prion
Prion
•added 2012/08/29 10:55 p.m.•26 views

Design/Logic Flaw

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

5CVSS6.4AI score0.02072EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2012/08/29 10:00 p.m.•35 views

CVE-2012-3312

The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

5.9AI score0.02072EPSS
SaveExploits0References4
NVD
NVD
•added 2012/08/22 10:42 a.m.•27 views

CVE-2012-0681

Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network...

4.3CVSS6.1AI score0.01711EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2012/08/22 10:00 a.m.•37 views

CVE-2012-0681

Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network...

6AI score0.01711EPSS
SaveExploits1References3
NVD
NVD
•added 2012/08/16 10:38 a.m.•30 views

CVE-2012-3025

The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network...

5CVSS6.1AI score0.01925EPSS
SaveExploits0References2
Prion
Prion
•added 2012/08/16 10:38 a.m.•23 views

Default configuration

The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network...

5CVSS6.7AI score0.01925EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder