CVE-2005-0522

Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges...

CVE-2005-1226

CVE-2005-1226 affects Coppermine Photo Gallery 1.3.2, where passwords are stored in plaintext. This enables remote attackers to obtain sensitive information and potentially compromise accounts. The NVD entry reports a CVSS2 base score of 7.5 (HIGH) with network access, low attack complexity, no a...

CVE-2001-1463

The CVE-2001-1463 vulnerability affects RhinoSoft Serv-U 3.0: the remote administration client transmits the user password in plaintext even when S/KEY One-Time Password (OTP) is enabled, enabling an attacker to sniff credentials over the network. The issue is a plaintext password exposure in the...

CVE-2001-1463

The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password OTP authentication is enabled, which allows remote attackers to sniff passwords...

CVE-2005-1097

CVE-2005-1097 concerns Rebrand P2P Share Spy 2.2, where the password is stored in plaintext in the registry (txtPassword), enabling local users to gain privileges. The connected records consistently describe the root cause as plaintext password storage in the registry and local privilege escalati...

CVE-2005-0619

The CVE-2005-0619 entry describes Einstein 1.0.1 storing usernames and passwords in plaintext in the Windows registry, enabling local privilege escalation. Affected component: registry-stored credentials within Einstein 1.0.1. Root cause: insecure plaintext storage of sensitive data in the regist...

CVE-2005-0604

CVE-2005-0604 affects lnss.exe in GFI Languard Network Security Scanner 5.0 . The vulnerability is that the program stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials. This is the stated impact in the records,...

CVE-2004-2578

phpGroupWare before 0.9.16.002 transmits the 1 header admin and 2 setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords...

CVE-2004-0616

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext...

cht-2004.txt

CHT Security Research Center-2004 http://www.CyberSpy.Org Turkey Software: Web Forums Server Web Site: http://www.minihttpserver.net Affected Versions: 1.6,2.0 Power Packcurrent Description: Web Forums Server is "all in one" Web Server for Microsoft Windows Operating Systems. Web Forums Server ha...

Multiple Vulnerabilities in Web Forums Server

CHT Security Research Center-2004 http://www.CyberSpy.Org Turkey Software: Web Forums Server Web Site: http://www.minihttpserver.net Affected Versions: 1.6,2.0 Power Packcurrent Description: Web Forums Server is "all in one" Web Server for Microsoft Windows Operating Systems. Web Forums Server ha...

CVE-2002-1491

The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges...

CVE-2002-1479

Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges...

IBM DB2 9.x < 9 Fix Pack 5 Multiple Vulnerabilities

Binary data 4536.prm...

MapInfo Discovery 1.01.1 - Administrative Authentication Bypass

MapInfo Discovery 1.01.1 - Administrative Authentication Bypass source: https://www.securityfocus.com/bid/10927/info Multiple remote vulnerabilities are reported in MapInfo Discovery. The first issue is reported to be an information disclosure vulnerability. An attacker may gain access to...

MapInfo Discovery 1.01.1 - Remote Log File Access Information Disclosure

MapInfo Discovery 1.01.1 - Remote Log File Access Information Disclosure source: https://www.securityfocus.com/bid/10927/info Multiple remote vulnerabilities are reported in MapInfo Discovery. The first issue is reported to be an information disclosure vulnerability. An attacker may gain access t...

MapInfo Discovery 1.01.1 - MapFrame.asp?mapname Cross-Site Scripting

MapInfo Discovery 1.01.1 - MapFrame.asp?mapname Cross-Site Scripting source: https://www.securityfocus.com/bid/10927/info Multiple remote vulnerabilities are reported in MapInfo Discovery. The first issue is reported to be an information disclosure vulnerability. An attacker may gain access to...

MapInfo Discovery 1.01.1 - Cleartext Transmission Credential Disclosure

MapInfo Discovery 1.01.1 - Cleartext Transmission Credential Disclosure source: https://www.securityfocus.com/bid/10927/info Multiple remote vulnerabilities are reported in MapInfo Discovery. The first issue is reported to be an information disclosure vulnerability. An attacker may gain access to...

MapInfo Discovery 1.0/1.1 - Administrative Authentication Bypass

source: https://www.securityfocus.com/bid/10927/info Multiple remote vulnerabilities are reported in MapInfo Discovery. The first issue is reported to be an information disclosure vulnerability. An attacker may gain access to potentially sensitive error log information that could aid an attacker ...

MapInfo Discovery 1.0/1.1 - 'MapFrame.asp?mapname' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10927/info Multiple remote vulnerabilities are reported in MapInfo Discovery. The first issue is reported to be an information disclosure vulnerability. An attacker may gain access to potentially sensitive error log information that could aid an attacker ...