CVE-2020-3355

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability is due to insufficient inpu...

Unspecified Vulnerability in Palo Alto Networks PAN-OS

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from a program that transmits sensitive information in clear text. An attacker could exploit the vulnerability...

CVE-2020-11532

Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server. This allows an attacker to bypass authentication for this server and execute all operations in the context of admin user...

PT-2020-12669 · Zoho · Zoho Manageengine Datasecurity Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine DataSecurity Plus versions prior to 6.0.1 Description: The issue allows an attacker to bypass authentication for the DataEngine Xnode server and execute all operations in the context of the admin user, due to the use of...

ManageEngine DataSecurity Plus Authentication Bypass

XL-2020-002 - DataSecurity Plus Xnode Server - Authentication Bypass =============================================================================== Identifiers ------------------------------------------------- CVE-2020-11532 XL-20-002 CVSSv3 score ------------------------------------------------...

CVE-2020-12142

IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative...

CVE-2020-12142

CVE-2020-12142 affects the EdgeConnect appliance. An admin user with shell access can retrieve IPSec UDP key material (IPSec seed and nonce) via CLI, REST APIs, or the Linux shell, enabling potential decryption of in-flight traffic. The issue requires administrative access and is described across...

CVE-2020-12142 IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials

IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative...

Sophos XG Firewall SFOS SQL Injection Vulnerability

Sophos XG firewall and SFOS are both products from Sophos UK.Sophos XG firewall is a next generation endpoint protection and enterprise firewall product.SFOS is an operating system for Sophos firewall products. An SQL injection vulnerability exists in SFOS on Sophos XG Firewall appliances...

Unspecified Vulnerability in D-Link DSL-2640B B2 cfm UDP

The D-Link DSL-2640B B2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the cfm UDP service listening on port 65002 in the D-Link DSL-2640B B2 EU4.01B version. An attacker could exploit the vulnerability to obtain administrative credentials...

CVE-2020-9275

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A cfm UDP service listening on port 65002 allows remote, unauthenticated exfiltration of administrative credentials...

CVE-2020-9275

The CVE-2020-9275 entry concerns D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on port 65002 is reachable remotely without authentication, enabling exfiltration of administrative credentials. This indicates a remote access risk where an attacker could obtain credentials throug...

CVE-2017-18844

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50...

CVE-2017-18845

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38 and R6800 before 1.1.0.38...

Design/Logic Flaw

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50...

CVE-2017-18844

CVE-2017-18844 affects certain NETGEAR routers (R6700v2 and R6800, prior to versions 1.1.0.38; D7000 prior to 1.0.1.50) and involves disclosure of administrative credentials. The vulnerability is local with low attack complexity and can impact confidentiality, integrity, and availability (high im...

CVE-2017-18844

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50...

Unspecified Vulnerability in NETGEAR RAX40

The NETGEAR RAX40 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR RAX40 prior to version 1.0.3.64, which can be exploited by an attacker to obtain administrative credentials...

Design/Logic Flaw

NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials...

CVE-2019-20638

The CVE-2019-20638 entry concerns NETGEAR MR1100 devices with firmware versions prior to 12.06.08.00, where there is disclosure of administrative credentials. The connected documents consistently reference the affected product (NETGEAR MR1100) and the vulnerable version threshold (before 12.06.08...