Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-255

CWE-255: Credentials Management Errors

Weaknesses in this category are related to the management of credentials.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

sun sunosOracle Solaris 8, 9, and 10 stores back-out patch files (undo.Z) unencrypted with world-readable...CVE-2011-04122.1 LowApril 19, 2011
bestpractical rtBest Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers...CVE-2011-16904.3 MediumApril 19, 2011
ibm soliddbsolid.exe in IBM solidDB before 4.5.181, 6.0.x before 6.0.1067, 6.1.x and 6.3.x before 6.3.47,...CVE-2011-15609.3 HighApril 5, 2011
cisco secure access control systemThe web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0...CVE-2011-0951EPSS 14.6%5.0 MediumApril 1, 2011
otrsOpen Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings...CVE-2010-4764Fix available5.0 MediumMarch 18, 2011
bestpractical rtBest Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login,...CVE-2011-10072.1 LowFebruary 28, 2011
pivotxThe password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of...CVE-2011-10357.5 HighFebruary 18, 2011
vmware vcenter serverThe vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log...CVE-2010-29282.1 LowFebruary 16, 2011
intellicom netbiter nb100, netbiter easyconnect ec150, netbiter modbus rtu-tcp gateway mb100 +4 more +6 moreWebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet...CVE-2010-473310.0 HighFebruary 14, 2011
smc networks smcd3g-ccr, smcd3g-ccr firmware +1 moreA certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0...CVE-2011-0885Public exploitEPSS 10.1%10.0 HighFebruary 8, 2011
cisco tandberg endpoint, tandberg personal video unit, tandberg personal video unit software +2 moreThe default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal...CVE-2011-0354Public exploitEPSS 14.0%10.0 HighFebruary 3, 2011
wb-i contents-mallContents-Mall before 15 does not properly handle passwords, which allows remote attackers to...CVE-2010-39255.8 MediumJanuary 13, 2011
novell suse linuxThe supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not ...CVE-2010-391210.0 HighJanuary 12, 2011
polyvision roomwizard, roomwizard firmware +1 moreThe PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the...CVE-2011-04237.5 HighJanuary 12, 2011
hp storageworks modular smart array p2000 g3 firmwareHP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005,...CVE-2010-41159.0 HighDecember 17, 2010
michael dehaan cobblerCobbler before 1.6.1 does not properly determine whether an installation has the default password...CVE-2009-50217.5 HighDecember 9, 2010
cisco unified videoconferencing system 5110, unified videoconferencing system 5110 firmware, unified videoconferencing system 5115 +1 more +3 moreCisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is...CVE-2010-43034.9 MediumNovember 22, 2010
cisco unified videoconferencing system 5110, unified videoconferencing system 5110 firmware, unified videoconferencing system 5115 +1 more +3 moreCisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is...CVE-2010-303810.0 HighNovember 22, 2010
camtron cmnc-200, cmnc-200 firmware +1 moreThe Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP...CVE-2010-4233Public exploit10.0 HighNovember 16, 2010
symantec mobile securityThe Symantec Norton Mobile Security application 1.0 Beta for Android records setup details,...CVE-2010-01134.3 MediumNovember 15, 2010
ibm omnifindESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the...CVE-2010-38975.0 MediumNovember 12, 2010
ibm rational quality manager, rational test lab manager +1 moreThe Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default...CVE-2010-4094Public exploitEPSS 64.5%5.0 MediumOctober 26, 2010
apache axis2, sap businessobjects +1 moreApache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D...CVE-2010-0219Public exploitEPSS 90.9%10.0 HighOctober 18, 2010
synology dsmThe FTP authentication module in Synology Disk Station 2.x logs passwords to the web application...CVE-2010-36842.1 LowSeptember 29, 2010
ibm filenet p8 application engineThe Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1...CVE-2008-72612.1 LowSeptember 20, 2010
ibm filenet content managerIBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which...CVE-2010-33195.0 MediumSeptember 13, 2010
ibm filenet content managerIBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 transmits passwords in cleartext, which...CVE-2010-33185.0 MediumSeptember 13, 2010
novell identity managerThe engine installer in Novell Identity Manager (aka IDM) 3.6.1 stores admin tree credentials in ...CVE-2010-32642.1 LowSeptember 8, 2010
novell suse linuxWebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a...CVE-2010-15075.0 MediumSeptember 3, 2010
devonit thin-client management toolThe DevonIT thin-client management tool relies on a shared secret for authentication but...CVE-2010-31225.0 MediumAugust 25, 2010
apple webkitloader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit...CVE-2010-176010.0 HighAugust 19, 2010
cisco unified wireless network solution softwareThe controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a...CVE-2010-297610.0 HighAugust 9, 2010
windriver vxworksThe INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the...CVE-2010-29667.8 HighAugust 4, 2010
atutor acollabAdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for...CVE-2009-49457.5 HighJuly 22, 2010
linearcorp emerge 50, emerge 5000 +1 moreThe Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which...CVE-2010-24695.0 MediumJune 25, 2010
linearcorp emerge 50, s2sys netbox, sonitrol eaccess +1 more +3 moreThe S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the...CVE-2010-24675.0 MediumJune 25, 2010
cisco mediator frameworkCisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before...CVE-2010-05999.3 HighMay 27, 2010
cisco mediator frameworkCisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before...CVE-2010-05989.3 HighMay 27, 2010
cisco mediator frameworkCisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before...CVE-2010-059510.0 HighMay 27, 2010
microsoft dynamics gpMicrosoft Dynamics GP has a default value of ACCESS for the system password, which might make it...CVE-2010-20834.0 MediumMay 26, 2010
cisco scientific atlanta webstar dpc2100r2The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0...CVE-2010-20825.0 MediumMay 26, 2010
apple safariApple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web...CVE-2010-19404.3 MediumMay 14, 2010
tukeva password reminderTUKEVA Password Reminder before 1.0.0.4 uses a hard-coded password for rem.accdb, which allows...CVE-2009-4781Public exploit7.2 HighApril 21, 2010
amsnlogin_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout,...CVE-2008-72554.6 MediumApril 20, 2010
ibm lotus notesIBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe,...CVE-2010-14872.1 LowApril 20, 2010
jasper httpdxThe FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of...CVE-2009-47707.5 HighApril 20, 2010
ibm websphere application serverIBM WebSphere Application Server (WAS) 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7...CVE-2010-07691.9 LowApril 1, 2010
apple mac os x serverPassword Server in Apple Mac OS X Server before 10.6.3 does not properly perform password...CVE-2010-05109.0 HighMarch 30, 2010
tiki tikiwiki cms\/groupwareThe user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user...CVE-2010-11357.5 HighMarch 26, 2010
timeclock-software employee timeclock softwareEmployee Timeclock Software 0.99 places the database password on the mysqldump command line,...CVE-2010-01242.1 LowMarch 12, 2010
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open