Multiple Windows wireless adapters WEP protection bypass

Atacker can force client to downgradte to unencrypted cleartext mode operations...

Multiple Microsoft Internet Explorer vulnerabilities

Code execution, memory corruption, download dialog manipulation, unencrypted HTTPS proxy data leak...

CVE-2005-3482

Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol LWAPP mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC...

POP2 Unencrypted Cleartext Logins

The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover login names and passwords by sniffing traffic to the POP2 daemon. OpenVAS Vulnerability Test $Id: pop2unencryptedcleartextlogins.nasl 6056 2017-05-02 09:02:50Z teissa $...

IMAP Unencrypted Cleartext Logins

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. OpenVAS...

IMAP Unencrypted Cleartext Login

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. NOTE: Valid credentials needs to given to the settings of SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

POP2 Unencrypted Cleartext Login

The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

POP3 Unencrypted Cleartext Login

The remote host is running a POP3 daemon that allows cleartext logins over unencrypted connections. NOTE: Depending on the POP3 server configuration valid credentials needs to be given to the settings of SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from ...

Cisco wireless accee points LWAPP mode unauthorized access

It's possible to send unencrypted packet with spoofed MAC to secure network...

Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access

...

NetForce NIS password information leak

File with NIS accounts passwords is sent with unencrypted diagnostic e-mail message...

CVE-2002-1848

TightVNC prior to 1.2.4 on Windows stores unencrypted passwords in the WinVNC Properties dialog password field, enabling local users to access passwords. Affected component: WinVNC password storage within the Windows UI; root cause is unencrypted plaintext storage. Impact: local disclosure of cre...

CVE-2002-1848

TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords...

firefly_pass_recovery.txt

--------------------- Application: --------------------- FireFly 1.0 --------------------- Introduction: --------------------- Vendor: NetCruiser Software www.netcruiser-software.com Vendor Description: Firefly is a Windows application that allows you to share files with other users. Firefly uses...

CVE-2004-1709

Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other users...

POP3 Cleartext Logins Permitted

The remote host is running a POP3 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the POP3 daemon if a less secure authentication mechanism eg, USER command, AUTH PLAIN, AUTH LOGIN is used. Note: This plugin...

POP2 Cleartext Logins Permitted

The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. An attacker can uncover login names and passwords by sniffing traffic to the POP2 daemon. This script was written by George A. Theall, . See the Nessus Scripts License for details. Changes by...

IMAP Service Cleartext Login Permitted

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. An attacker can uncover user names and passwords by sniffing traffic to the IMAP daemon if a less secure authentication mechanism eg, LOGIN command, AUTH=PLAIN, AUTH=LOGIN is used. This script was...

Webroot Spy Sweeper weak encryption

Password is stored in registry uencrypted...

CVE-1999-1537

IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service resource exhaustion via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the...