CWE-778 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-778/ Sun, 26 Feb 2023 09:10:28 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-778 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-778/ 32 32 CVE-2008-4315 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4315/ Sun, 26 Feb 2023 09:10:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4315/ tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.

The post CVE-2008-4315 appeared first on CVE Vulnerability.

]]> tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.

The post CVE-2008-4315 appeared first on CVE Vulnerability.

]]> CVE-2008-1203 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1203/ Sun, 26 Feb 2023 09:08:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1203/ The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.

The post CVE-2008-1203 appeared first on CVE Vulnerability.

]]> The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.

The post CVE-2008-1203 appeared first on CVE Vulnerability.

]]> CVE-2007-3730 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-3730/ Sun, 26 Feb 2023 09:06:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-3730/ The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP address or attempted username for login attempts, which might help remote attackers to avoid identification.

The post CVE-2007-3730 appeared first on CVE Vulnerability.

]]> The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP address or attempted username for login attempts, which might help remote attackers to avoid identification.

The post CVE-2007-3730 appeared first on CVE Vulnerability.

]]> CVE-2007-1225 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1225/ Sun, 26 Feb 2023 09:05:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1225/ The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection.

The post CVE-2007-1225 appeared first on CVE Vulnerability.

]]> The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection.

The post CVE-2007-1225 appeared first on CVE Vulnerability.

]]> CVE-2019-19295 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19295/ Sun, 26 Feb 2023 06:32:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19295/ A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of security-relevant activities in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker could exploit this vulnerability to perform covert actions that are not […]

The post CVE-2019-19295 appeared first on CVE Vulnerability.

]]> A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of security-relevant activities in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker could exploit this vulnerability to perform covert actions that are not visible in the application log.

The post CVE-2019-19295 appeared first on CVE Vulnerability.

]]> CVE-2021-32680 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-32680/ Thu, 23 Feb 2023 14:09:49 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-32680/ Nextcloud Server is a Nextcloud package that handles data storage. In versions priot to 19.0.13, 20.0.11, and 21.0.3, Nextcloud Server audit logging functionality wasn’t properly logging events for the unsetting of a share expiration date. This event is supposed to be logged. This issue is patched in versions 19.0.13, 20.0.11, and 21.0.3.

The post CVE-2021-32680 appeared first on CVE Vulnerability.

]]> Nextcloud Server is a Nextcloud package that handles data storage. In versions priot to 19.0.13, 20.0.11, and 21.0.3, Nextcloud Server audit logging functionality wasn’t properly logging events for the unsetting of a share expiration date. This event is supposed to be logged. This issue is patched in versions 19.0.13, 20.0.11, and 21.0.3.

The post CVE-2021-32680 appeared first on CVE Vulnerability.

]]>