Lucene search
+L

9 matches found

NVD
NVD
•added 2026/07/07 10:16 a.m.•27 views

CVE-2026-14868

The encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all versions prior to 17.0.0, is not strong enough for the level of protection required. A local attacker could alter the existing configuration and ultimately gai...

8.4CVSS0.00064EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/13 8:14 a.m.•42 views

CVE-2026-3873 Legacy built-in user account

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0...

7.2CVSS0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/13 8:14 a.m.•8 views

CVE-2026-3873 Legacy built-in user account

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0...

7.2CVSS5.8AI score0.00266EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/09/13 10:15 p.m.•10 views

CVE-2022-35582

Penta Security Systems Inc WAPPLES 4.0., 5.0.0., 5.0.12. are vulnerable to Incorrect Access Control. The operating system that WAPPLES runs on has a built-in non-privileged user penta with a predefined password. The password for this user, as well as its existence, is not disclosed in the...

8.8CVSS7.4AI score0.00895EPSS
SaveExploits0References4
OSV
OSV
•added 2022/05/13 1:48 a.m.•20 views

GHSA-4H47-H3CR-23WH Improper Authorization in Jenkins

A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that allows attackers without Overall/Read permission to access a specific URL on instances using the built-in Jenkins user database...

6.5CVSS6.7AI score0.0147EPSS
SaveExploits2References5
OSV
OSV
•added 2017/08/30 6:29 p.m.•14 views

CVE-2017-12711

An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to V8.220170817. A built-in user account has been granted a sensitive privilege that may allow a user to elevate to administrative privileges...

7.8CVSS7.2AI score0.0035EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/08/30 12:00 a.m.•13 views

Advantech WebAccess Elevation of Privilege Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. An elevation of privilege vulnerability exists in Advantec...

7.8CVSS8AI score0.0035EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/30 12:00 a.m.•5 views

CVE-2017-12711: Incorrect Privilege Assignment

An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to V8.220170817. A built-in user account has been granted a sensitive privilege that may allow a user to elevate to administrative privileges...

7.8CVSS5.6AI score0.0035EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2004/11/30 12:00 a.m.•54 views

WS_FTP Server buffer overflow adn backdor

Buffer overflow in STAT and another commands. Built-in user accaount XXSESSMGRYY with password X1833 allows command execution on server...

4.4AI score
SaveExploits0References7Affected Software1
Rows per page
Query Builder