12558 matches found
CVE-2008-1394
Plone CMS before 3 places a base64 encoded form of the username and password in the ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network...
CVE-2008-1567
phpMyAdmin before 2.11.5.1 stores the MySQL 1 username and 2 password, and the 3 Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information...
ALPINE-CVE-2019-15162
rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames...
Elastic Stack 7.4.0 security update
Elastic Code local file disclosure flaw ESA-2019-12 A local file disclosure flaw was found in Elastic Code. If a malicious code repository is imported into Code it is possible to read arbitrary files from the local filesystem of the Kibana instance running Code with the permission of the Kibana...
pfSense cross-site scripting vulnerability (CNVD-2019-43357)
pfsense is an open source routing and firewall software , based on freebsd system customization and development . A cross-site scripting vulnerability exists in pfSense 2.4.4-p3 and earlier versions. The vulnerability stems from the unverified display of the username and delmac parameters in...
CVE-2019-16914
An XSS issue was discovered in pfSense through 2.4.4-p3. In servicescaptiveportalmac.php, the username and delmac parameters are displayed without sanitization...
Cross site scripting
An XSS issue was discovered in pfSense through 2.4.4-p3. In servicescaptiveportalmac.php, the username and delmac parameters are displayed without sanitization...
MediaWiki Information Disclosure Vulnerability (CNVD-2019-36866)
MediaWiki is a free software open source wiki package written in PHP, originally used for Wikipedia, but now also used by several other projects of the non-profit Wikimedia Foundation and many other wikis. An information disclosure vulnerability exists in MediaWiki 1.33.0 and earlier versions. An...
D-Link DSL-2875AL Password Disclosure Vulnerability
D-Link DSL-2875AL is prone to a password disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-16264
In Escuela de Gestion Publica Plurinacional EGPP Sistema Integrado de Gestion Academica GESAC v1, the username parameter of the authentication form is vulnerable to SQL injection, allowing attackers to access the database...
Atlassian Jira issueTable username information disclosure vulnerability
Summary An username information disclosure vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. Anonymous users can differentiate between valid usernames and invalid usernames via /rest/issueNav/1/issueTable API endpoint. Tested Versions Atlassian Jira 7.6.4 Atlassian Jira 8.1.0...
Atlassian Jira Information Disclosure Vulnerability (CNVD-2019-32322)
Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in the /rest/api/latest/groupuserpicker resource in Atlassian Jira versions prior...
D-Link DSL-2875AL/DSL-2877AL Information Disclosure Vulnerability
D-Link DSL-2875AL and DSL-2877AL are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2019-14936
Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure Username and Password Hash...
CVE-2019-14936
Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure Username and Password Hash...
Information disclosure
Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure Username and Password Hash...
CVE-2019-14936
CVE-2019-14936 affects the WordPress plugin Easy!Appointments version 1.3.2. The vulnerability allows disclosure of sensitive information: usernames and password hashes. Public sources describe it as an information disclosure flaw in Easy!Appointments 1.3.2, with advisories noting a configuration...
CVE-2019-8449
The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability...
CVE-2019-14996
The FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the searchOwnerUserName parameter...