2823 matches found
PT-2018-3889 · D Link · D-Link Dir-601
Name of the Vulnerable Software and Affected Versions: D-Link DIR-601 version 2.02NA Description: An issue allows an attacker with low privilege "User" account access to intercept the response from a POST request and obtain "Admin" rights due to the admin password being displayed in XML. The...
CVE-2018-10369
A Cross-site scripting XSS vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login...
CVE-2018-10369
A Cross-site scripting XSS vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login...
Cross site scripting
A Cross-site scripting XSS vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login...
CVE-2018-10369
A Cross-site scripting XSS vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login...
CVE-2018-0391
A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to become inoperable. The vulnerability is due to insufficient validation of a password change request. An attacker could exploit this...
CVE-2016-5649
A vulnerability is in the 'BSWcxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.507.0.50, and DGND3700, version DGND3700-V1.0.0.171.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text...
CVE-2016-5649
A vulnerability is in the 'BSWcxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.507.0.50, and DGND3700, version DGND3700-V1.0.0.171.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text...
Authentication flaw
A vulnerability is in the 'BSWcxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.507.0.50, and DGND3700, version DGND3700-V1.0.0.171.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text...
CVE-2016-5649
Vulnerability summary (CVE-2016-5649) : Netgear DGN2200 (V1.0.0.50_7.0.50) and DGND3700 (V1.0.0.17_1.0.17) expose an unauthenticated admin password via the web page BSW_cxttongr.htm. When accessed, the page processes the request and returns the administrator password in clear text before redirect...
Oracle GlassFish Open Source Edition Remote Monitoring Vulnerability
Oracle GlassFish is the United States Oracle Oracle company to achieve a jsp and other applications such as server software. Oracle GlassFish Open Source Edition is its open source version. Oracle GlassFish Open Source Edition 5.0 version of the demonstration function has a security vulnerability...
CVE-2018-14331
An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my...
CVE-2018-14331
An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my...
XiaoCms X1 Cross-Site Request Forgery Vulnerability
XiaoCms X1 is a lightweight content management system CMS based on PHP and MySQL and capable of running on Linux, Windows and other platforms. A cross-site request forgery vulnerability exists in XiaoCms X1 version 20140305. A remote attacker can use this vulnerability to change the password of t...
UBUNTU-CVE-2018-14324
The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensitive information, perform database operations, or manipulate the demo via a JMX RMI session, aka a...
CVE-2018-14324
The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensitive information, perform database operations, or manipulate the demo via a JMX RMI session, aka a...
CVE-2018-14324
CVE-2018-14324 affects Oracle GlassFish Open Source Edition 5.0 where the demo feature leaves TCP port 7676 open by default with admin/admin credentials. The root cause is a misconfigured demo feature that exposes a JMX RMI session, allowing remote attackers to read sensitive information, perform...
CVE-2018-14324
The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensitive information, perform database operations, or manipulate the demo via a JMX RMI session, aka a...
