Lucene search
+L

8881 matches found

Prion
Prion
added 2009/07/02 10:30 a.m.22 views

Design/Logic Flaw

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges...

4.6CVSS7.1AI score0.00293EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2009/07/02 10:00 a.m.29 views

CVE-2009-2312

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges...

6.6AI score0.00293EPSS
SaveExploits1References3
CVE
CVE
added 2009/07/02 10:00 a.m.63 views

CVE-2009-2312

McAfee SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for that file, enabling local attackers to gain privileges. The SEBUG entry additionally cites the credentials and plaintext passwords located under c:\Program Files\S...

4.6CVSS6.8AI score0.00293EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2009/07/01 1:00 p.m.26 views

CVE-2009-2272

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

7.5CVSS7.5AI score0.00644EPSS
SaveExploits0References1
Prion
Prion
added 2009/07/01 1:00 p.m.23 views

Design/Logic Flaw

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

5CVSS6.9AI score0.00644EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2009/07/01 12:26 p.m.29 views

CVE-2009-2272

The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by 1 reading a cookie file, by 2 sniffing the network for HTTP headers, and possibly by using unspecified other vectors...

7.5AI score0.00644EPSS
SaveExploits0References1
CVE
CVE
added 2009/07/01 12:26 p.m.56 views

CVE-2009-2272

CVE-2009-2272 concerns the Huawei D100 where the administrator’s account name and password are stored in cleartext in a cookie. The underlying issue enables context-dependent attackers to obtain sensitive information by reading a cookie file or sniffing HTTP headers, with other vectors possible. ...

7.5CVSS7.4AI score0.00644EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2009/07/01 12:00 a.m.12 views

PT-2009-4708 · Huawei · Huawei D100

Name of the Vulnerable Software and Affected Versions: Huawei D100 affected versions not specified Description: The issue allows context-dependent attackers to obtain sensitive information, specifically the administrator's account name and password, which are stored in cleartext in a cookie...

7.5CVSS7.4AI score0.00644EPSS
SaveExploits0References3
Prion
Prion
added 2009/06/08 7:30 p.m.21 views

Design/Logic Flaw

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server...

4.3CVSS7.2AI score0.00248EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2009/06/08 7:30 p.m.25 views

CVE-2008-6828

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server...

7.8CVSS7.8AI score0.00248EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2009/06/08 7:00 p.m.35 views

CVE-2008-6828

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server...

7.8AI score0.00248EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2009/06/05 12:00 a.m.20 views

Mandrake Security Advisory MDVSA-2009:123 (opensc)

The remote host is missing an update to opensc announced via advisory MDVSA-2009:123. OpenVAS Vulnerability Test $Id: mdksa2009123.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:123 opensc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

4.3CVSS7.5AI score0.01091EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2009/06/05 12:00 a.m.39 views

Mandrake Security Advisory MDVSA-2009:123 (opensc)

The remote host is missing an update to opensc announced via advisory MDVSA-2009:123. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

7.5CVSS7.5AI score0.01091EPSS
SaveExploits0References1
NVD
NVD
added 2009/06/01 2:30 p.m.14 views

CVE-2008-6817

Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5CVSS6.1AI score0.00901EPSS
SaveExploits0References1
NVD
NVD
added 2009/06/01 2:30 p.m.19 views

CVE-2008-6818

Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5CVSS6.1AI score0.00901EPSS
SaveExploits0References1
Prion
Prion
added 2009/06/01 2:30 p.m.12 views

Design/Logic Flaw

Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5CVSS6.6AI score0.00901EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2009/06/01 2:30 p.m.18 views

Code injection

Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5CVSS6.6AI score0.00901EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2009/06/01 2:00 p.m.45 views

CVE-2008-6817

CVE-2008-6817 affects Mole Group Lastminute Script 4.0 and earlier, where passwords are stored in cleartext. This indicates improper credential storage (cleartext) and can allow context-dependent attackers to obtain sensitive information. The description notes provenance is uncertain and informat...

5CVSS6.2AI score0.00901EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2009/06/01 2:00 p.m.26 views

CVE-2008-6818

Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

6.1AI score0.00901EPSS
SaveExploits0References1
CVE
CVE
added 2009/06/01 2:00 p.m.52 views

CVE-2008-6818

The CVE-2008-6818 entry concerns Mole Group Real Estate Script (version 1.1 and earlier) where passwords are stored in cleartext. The root cause is insecure credential storage, enabling context-dependent attackers to obtain sensitive information. The connected documents confirm the existence of t...

5CVSS6.2AI score0.00901EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder