Vulnerabilities (CVE)

  1. OpenCVE
  2. Vulnerabilities (CVE)
Filtered by vendor No-ip Subscribe
Filtered by product Dynamic Update Client
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-2747 2 Microsoft, No-ip 2 Windows, Dynamic Update Client 2024-02-04 2.1 LOW N/A
No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values.