4229 matches found
Security Bulletin: WebSphere Process Server Hypervisor Edition vulnerability (CVE-2014-3566)
Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled by default in IBM WebSphere Application Server. IBM WebSphere Application Server is shipped as a component of IBM WebSphere Process Server...
CVE-2018-6672: Exposure of Sensitive Information to an Unauthorized Actor
Information disclosure vulnerability in McAfee ePolicy Orchestrator ePO 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensitive information in plain text format via unspecified vectors...
PT-2018-17707
Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions 5.3.0 through 5.3.3 McAfee ePolicy Orchestrator ePO versions 5.9.0 through 5.9.1 Description The issue allows authenticated users to view sensitive information in plain text format. Recommendations For...
Ftp Server 1.32 - Credential Disclosure Vulnerability
Exploit for Android platform in category local exploits Exploit Title: Ftp Server 1.32 - Credential Disclosure Software Link: https://play.google.com/store/apps/details?id=com.theolivetree.ftpserver Version: 1.32 Android App Vendor: The Olive Tree Exploit Author: ManhNho CVE: N/A Category: Mobile...
Ftp Server 1.32 - Credential Disclosure
Ftp Server 1.32 - Credential Disclosure Exploit Title: Ftp Server 1.32 - Credential Disclosure Date: 2018-05-29 Software Link: https://play.google.com/store/apps/details?id=com.theolivetree.ftpserver Version: 1.32 Android App Vendor: The Olive Tree Exploit Author: ManhNho CVE: N/A Category: Mobil...
Ftp Server 1.32 - Credential Disclosure
Exploit Title: Ftp Server 1.32 - Credential Disclosure Date: 2018-05-29 Software Link: https://play.google.com/store/apps/details?id=com.theolivetree.ftpserver Version: 1.32 Android App Vendor: The Olive Tree Exploit Author: ManhNho CVE: N/A Category: Mobile Apps Tested on: Android 4.4 Descriptio...
CVE-2017-7933
In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...
Design/Logic Flaw
In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...
CVE-2017-7933
In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...
PT-2018-8432
Name of the Vulnerable Software and Affected Versions ABB IP GATEWAY versions 3.39 and prior Description The issue concerns configuration files that store passwords in plain-text, potentially allowing an attacker to gain unauthorized access. Recommendations For ABB IP GATEWAY versions 3.39 and...
CVE-2017-7933: Insufficiently Protected Credentials
In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access...
CVE-2018-1241: Insertion of Sensitive Information into Log File
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP...
[ASA-201805-21] thunderbird: multiple issues
Arch Linux Security Advisory ASA-201805-21 ========================================== Severity: Critical Date : 2018-05-21 CVE-ID : CVE-2018-5150 CVE-2018-5154 CVE-2018-5155 CVE-2018-5159 CVE-2018-5161 CVE-2018-5162 CVE-2018-5168 CVE-2018-5170 CVE-2018-5178 CVE-2018-5183 CVE-2018-5184 CVE-2018-51...
PT-2018-5368 · Moxa · Moxa Edr-810
Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A password storage issue exists in the operating system functionality, allowing an attacker with shell access to extract passwords in clear text from the device. Recommendations: For Moxa...
Gitlab Hook Plugin stores and displays GitLab API token in plain text
Gitlab Hook Plugin does not encrypt the Gitlab API token used to access Gitlab. This can be used by users with Jenkins controller file system access to obtain GitHub credentials. Additionally, the Gitlab API token round-trips in its plaintext form, and is displayed in a regular text field to user...
A bug stored Twitter passwords in plain text so change your password
By Carolina Twitter, the social network, and online news giant is sending notifications This is a post from HackRead.com Read the original post: A bug stored Twitter passwords in plain text so change your password...
Ed: Session Cookie Without Secure Flag,
Assigned to:-ED Assigned by:- Kirtikumar Anandrao Ramchandani Assigned on:- 25/04/2018 Bug overview:- Session Cookie without secure flag. Cookie Name:- gitlabsession Description:-Risk description: Since the Secure flag is not set on the cookie, the browser will send it over an unencrypted channel...
CVE-2017-1764
IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to a local user. IBM X-Force ID: 136149...
Design/Logic Flaw
IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to a local user. IBM X-Force ID: 136149...
