Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-2747

No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Microsoft No-ip
Products
Windows Dynamic Update Client
CVE-2008-5369

noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
No-ip
Products
No-ip2
CVE-2024-40457

No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: the vendor's position is that cleartext in /etc/default/noip-duc is recommended and is the intentional behavior.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
No-ip
Products
Duc