CWE-319 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-319/ Sun, 26 Feb 2023 09:10:31 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-319 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-319/ 32 32 CVE-2008-4390 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4390/ Sun, 26 Feb 2023 09:10:31 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4390/ The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network.

The post CVE-2008-4390 appeared first on CVE Vulnerability.

]]> The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network.

The post CVE-2008-4390 appeared first on CVE Vulnerability.

]]> CVE-2008-4122 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4122/ Sun, 26 Feb 2023 09:10:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4122/ Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

The post CVE-2008-4122 appeared first on CVE Vulnerability.

]]> Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

The post CVE-2008-4122 appeared first on CVE Vulnerability.

]]> CVE-2008-3289 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3289/ Sun, 26 Feb 2023 09:09:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3289/ EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet.

The post CVE-2008-3289 appeared first on CVE Vulnerability.

]]> EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet.

The post CVE-2008-3289 appeared first on CVE Vulnerability.

]]> CVE-2008-0374 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0374/ Sun, 26 Feb 2023 09:08:31 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0374/ OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777.

The post CVE-2008-0374 appeared first on CVE Vulnerability.

]]> OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777.

The post CVE-2008-0374 appeared first on CVE Vulnerability.

]]> CVE-2007-5626 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-5626/ Sun, 26 Feb 2023 09:07:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-5626/ make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network.

The post CVE-2007-5626 appeared first on CVE Vulnerability.

]]> make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network.

The post CVE-2007-5626 appeared first on CVE Vulnerability.

]]> CVE-2007-4961 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4961/ Sun, 26 Feb 2023 09:07:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4961/ The login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending this hash to a Second Life authentication […]

The post CVE-2007-4961 appeared first on CVE Vulnerability.

]]> The login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending this hash to a Second Life authentication server.

The post CVE-2007-4961 appeared first on CVE Vulnerability.

]]> CVE-2007-4786 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4786/ Sun, 26 Feb 2023 09:07:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4786/ Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the “test aaa” command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which […]

The post CVE-2007-4786 appeared first on CVE Vulnerability.

]]> Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the “test aaa” command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.

The post CVE-2007-4786 appeared first on CVE Vulnerability.

]]> CVE-2018-8842 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8842/ Sun, 26 Feb 2023 06:51:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8842/ Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The Philips e-Alert communication channel is not encrypted which could therefore lead to disclosure of personal contact information and application login credentials from within the same […]

The post CVE-2018-8842 appeared first on CVE Vulnerability.

]]> Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The Philips e-Alert communication channel is not encrypted which could therefore lead to disclosure of personal contact information and application login credentials from within the same subnet.

The post CVE-2018-8842 appeared first on CVE Vulnerability.

]]> CVE-2018-8855 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8855/ Sun, 26 Feb 2023 06:51:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8855/ Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.

The post CVE-2018-8855 appeared first on CVE Vulnerability.

]]> Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.

The post CVE-2018-8855 appeared first on CVE Vulnerability.

]]> CVE-2018-7960 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7960/ Sun, 26 Feb 2023 06:51:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7960/ There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensitive information leak.

The post CVE-2018-7960 appeared first on CVE Vulnerability.

]]> There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensitive information leak.

The post CVE-2018-7960 appeared first on CVE Vulnerability.

]]>