33 matches found
MAL-2024-840 Malicious code in wlwz-2312-7404 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec91823dc98102a0bcba0524e879f7fd5b5470bd4daa45305cf307a3f0921727 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2016-7404
OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform...
FTP Brute Force Logins With Default Credentials Reporting
It was possible to login into the remote FTP server using weak/known credentials. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-7404
creationtimestamp| type| source ---|---|--- 2019-06-21 18:29:24+00:00| seen| https://t.me/cibsecurity/5076...
CVE-2016-7404
OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform...
CVE-2016-7404
CVE-2016-7404 affects OpenStack Magnum where credentials are passed into Heat templates for instance creation. The underlying issue is that these credentials, intended for SSL certificate retrieval, can be exploited to perform any API operation the user is authorized to perform, enabling full API...
CVE-2019-7404
CVE-2019-7404 affects LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. An unauthenticated user can read a log file by issuing an HTTP request that includes the file’s full pathname (for example, http://192.168.0.1/var/gapm7100_${today’s_date}.log). The connected Red Hat and CVE records reiterate t...
CVE-2017-7404
The CVE references a CSRF vulnerability in the Web Interface of the D-Link DIR-615 (pre‑v20.12PTb04). Attackers can lure a logged‑in user to a malicious page which sends a POST to Form2File.htm, uploading firmware without credentials and potentially rebooting/crashing the device (DoS) or enabling...
CVE-2014-7404
CVE-2014-7404 entry is rejected/not used and does not represent an active vulnerability.
SUSE-SU-2017:1233-1 Security update for openstack-magnum
This update for openstack-magnum fixes the following issues: Security issues fixed: - CVE-2016-7404: Magnum created instances have full API access to creating user's OpenStack account bsc998182. Bugfixes: - Fixed exception for InvalidParameterValue. - Updated patches have been tested against...
CVE-2015-7404
CVE-2015-7404 affects IBM Tivoli Storage Manager products (Databases for SQL Server, Mail for Exchange, and FlashCopy Manager) when application tracing is enabled. The root issue is that the Change TSM Password operation (changetsmpassword) writes passwords in plaintext to application trace outpu...
SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 7404)
A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running postgresql. CVE-2010-4015:CVSS v2 Base Score: 4.9 Additionally a possible log forging problem was fixed too. CVE-2010-4014 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...