1659 matches found
OfficeScan configuration file disclosure
Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources,...
Ipswitch WS_FTP Professional < 12.6 Weak Stored Password Vulnerability
Ipswitch WSFTP Professional is using a weak encryption method to store site passwords. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SecureW2 weak encryption
Weak PRNG generation algorithm for TLS pre-master key...
CVE-2005-2898
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive informatio...
CVE-2005-2879
Advansysperu Software USB Lock Auto-Protect AP 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection...
CVE-2005-2915
The CVE-2005-2915 entry involves the Linksys WRT54G router (various 3.x releases) using a weak XOR-based encoding with a fixed mask for configuration data. This flaw could let an attacker decrypt configuration information and, in conjunction with CVE-2005-2914, potentially re-encrypt it. Connecte...
CVE-2005-2898
FileZilla vulnerability CVE-2005-2898 affects versions 2.2.14b–2.2.15 (and possibly earlier) where, if “Use secure mode” is disabled, passwords are stored using a weak encryption scheme in the configuration file. This allows local users to obtain sensitive information. The issue is disputed by th...
CVE-2005-2898
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive informatio...
CVE-2005-2879
Advansysperu Software USB Lock Auto-Protect (AP) 1.5 is affected by a vulnerability where passwords are encrypted with a weak scheme. This allows local users to obtain sensitive information and bypass USB interface protection. The CVSS data indicates a local attack with low base severity (2.1, LO...
CVE-2005-2599
Hummingbird FTP for Connectivity 10.0 uses weak encryption trivial encoding to store the user's password in the FTP profile, which allows attackers to gain privileges...
CVE-2005-2599
Hummingbird FTP for Connectivity 10.0 uses weak encryption trivial encoding to store the user's password in the FTP profile, which allows attackers to gain privileges...
CVE-2005-2593
Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors...
CVE-2005-2599
CVE-2005-2599 affects Hummingbird FTP for Connectivity 10.0. The vulnerability arises from storing the user’s password in the FTP profile using weak encoding, enabling an attacker to gain privileges. The available sources (CVE entries and related records) describe the weakness in password storage...
CVE-2005-2593
Parlano MindAlign 5.0 and later versions are described as using weak encryption, with unknown impact and attack vectors. The CVSS v2.0 data from NVD lists a base score of 10.0, attack vector Network, complexity Low, authentication None, and Confidentiality/Integrity/Availability Impact as Complet...
CVE-2005-2593
Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors...
Hummingbird FTP client weak encryption
Profiles are "encrypted" by XOR'ing with fixed byte value 0x7d...
Multiple MindAlign instant messenger vulnerabilities
Information leak, authentication bypass, crossite scripting, weak encryption, DoS...
Several Vulnerability Issues Affecting the MindAlign
NISCC Vulnerability Advisory 356752/NISCC/MINDALIGN Several Vulnerability Issues Affecting the MindAlign Product Version Information Advisory Reference 356752/NISCC/MINDALIGN Release Date 12 August 2005 Last Revision 12 August 2005 Version Number 1.0 What is Affected? The following versions of th...