1379 matches found
CVE-2024-38902
CVE-2024-38902 affects H3C Magic R230, specifically version V100R002. The description across sources confirms a hardcoded password in /etc/shadow that can allow an attacker to log in as root. Public records from NVD/Red Hat/CNVD/CVE entries corroborate the vulnerability details (no exploit specif...
CVE-2024-37644
TRENDnet TEW-814DAP v1FW1.01B01 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...
CVE-2024-37644
TRENDnet TEW-814DAP v1FW1.01B01 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...
CVE-2024-37644
CVE-2024-37644 affects TRENDnet TEW-814DAP v1 (FW1.01B01). A hardcoded password in /etc/shadow.sample enables root login. CVSS v3.1: 8.8 (Network, HIGH impact across Confidentiality, Integrity, Availability). No remediation details are provided in the connected documents; exploitation status is n...
CVE-2024-37630
D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root...
CVE-2024-37630
The CVE-2024-37630 affects D-Link DIR-605L v2.13B01 (firmware). A hardcoded password in /etc/passwd allows an attacker to log in as root and obtain administrator privileges. Public documents consistently describe root-level compromise; no explicit firmware fix version is provided. PT-Security not...
CVE-2024-37630
D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root...
RHEL 9 : rpm-ostree (RHSA-2024:3823)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3823 advisory. The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used...
CVE-2024-35235
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the...
Moderate: rpm-ostree security update
The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used both on client systems and on server-side composes. The rpm-ostree-client package provides commands for client systems to perform upgrades and...
ALSA-2024:3823 Moderate: rpm-ostree security update
The rpm-ostree tool binds together the RPM packaging model with the OSTree model of bootable file system trees. It provides commands that can be used both on client systems and on server-side composes. The rpm-ostree-client package provides commands for client systems to perform upgrades and...
CVE-2023-49223
Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...
CVE-2023-49223
Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...
CVE-2023-49223
CVE-2023-49223 affects Precor touchscreen console models P62, P80, and P82. Root password is stored in /etc/passwd, enabling a remote attacker to obtain sensitive information and potentially extract files. The impact is described as high confidentiality and integrity risk; attack vector is remote...
CVE-2023-49223
Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...
Path Traversal
github.com/cri-o/cri-o is vulnerable to Path Traversal. The vulnerability is due to the path of the /etc directory being relative to the base of the container, which could lead to a container escape...
CVE-2024-36782
TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...
RHEL 6 : setup (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - setup: nologin listed in /etc/shells violates security expectations CVE-2018-1113 Note that Nessus has not tested f...
RHEL 5 : libuser (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libuser: TOCTOU race conditions by copying and removing directory trees CVE-2012-5630 - libuser: Security...
