1947 matches found
PT-2020-12669 · Zoho · Zoho Manageengine Datasecurity Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine DataSecurity Plus versions prior to 6.0.1 Description: The issue allows an attacker to bypass authentication for the DataEngine Xnode server and execute all operations in the context of the admin user, due to the use of...
ManageEngine DataSecurity Plus Authentication Bypass
XL-2020-002 - DataSecurity Plus Xnode Server - Authentication Bypass =============================================================================== Identifiers ------------------------------------------------- CVE-2020-11532 XL-20-002 CVSSv3 score ------------------------------------------------...
CVE-2020-12142
IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative...
CVE-2020-12142 IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials
IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative...
CVE-2020-12142
CVE-2020-12142 affects the EdgeConnect appliance. An admin user with shell access can retrieve IPSec UDP key material (IPSec seed and nonce) via CLI, REST APIs, or the Linux shell, enabling potential decryption of in-flight traffic. The issue requires administrative access and is described across...
Sophos XG Firewall SFOS SQL Injection Vulnerability
Sophos XG firewall and SFOS are both products from Sophos UK.Sophos XG firewall is a next generation endpoint protection and enterprise firewall product.SFOS is an operating system for Sophos firewall products. An SQL injection vulnerability exists in SFOS on Sophos XG Firewall appliances...
Unspecified Vulnerability in D-Link DSL-2640B B2 cfm UDP
The D-Link DSL-2640B B2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the cfm UDP service listening on port 65002 in the D-Link DSL-2640B B2 EU4.01B version. An attacker could exploit the vulnerability to obtain administrative credentials...
CVE-2020-9275
An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A cfm UDP service listening on port 65002 allows remote, unauthenticated exfiltration of administrative credentials...
CVE-2020-9275
The CVE-2020-9275 entry concerns D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on port 65002 is reachable remotely without authentication, enabling exfiltration of administrative credentials. This indicates a remote access risk where an attacker could obtain credentials throug...
CVE-2017-18844
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50...
CVE-2017-18845
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38 and R6800 before 1.1.0.38...
Design/Logic Flaw
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50...
CVE-2017-18844
CVE-2017-18844 affects certain NETGEAR routers (R6700v2 and R6800, prior to versions 1.1.0.38; D7000 prior to 1.0.1.50) and involves disclosure of administrative credentials. The vulnerability is local with low attack complexity and can impact confidentiality, integrity, and availability (high im...
CVE-2017-18844
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50...
Unspecified Vulnerability in NETGEAR RAX40
The NETGEAR RAX40 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR RAX40 prior to version 1.0.3.64, which can be exploited by an attacker to obtain administrative credentials...
Design/Logic Flaw
NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials...
CVE-2019-20638
The CVE-2019-20638 entry concerns NETGEAR MR1100 devices with firmware versions prior to 12.06.08.00, where there is disclosure of administrative credentials. The connected documents consistently reference the affected product (NETGEAR MR1100) and the vulnerable version threshold (before 12.06.08...
CVE-2020-11449
An issue was discovered on Technicolor TC7337 8.89.17 devices. An attacker can discover admin credentials in the backup file, aka backupsettings.conf...