Lucene search
+L

1914 matches found

Positive Technologies
Positive Technologies
•added 2024/04/08 12:00 a.m.•14 views

PT-2024-22247 · Unify · Unify Cp Ip Phone

Name of the Vulnerable Software and Affected Versions: Unify CP IP Phone version 1.10.4.3 Description: The issue is related to weak credentials, specifically a hardcoded root password, in the firmware. Recommendations: For Unify CP IP Phone version 1.10.4.3, consider changing the hardcoded root...

8.8CVSS6.7AI score0.00448EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2024/04/08 12:00 a.m.•20 views

Unify CP IP Phone 安全漏洞

Unify CP IP Phone is a phone from Unify Germany. A security vulnerability exists in Unify CP IP Phone version 1.10.4.3, which stems from the use of weak credentials...

8.8CVSS6.8AI score0.00448EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/04/08 12:00 a.m.•24 views

CP Plus Wi-Fi Camera 安全漏洞

CP Plus Wi-Fi Camera is a wireless security camera from CP Plus. A security vulnerability exists in CP Plus Wi-Fi Camera 20240401 and prior versions, which stems from an improper authorization issue in the User Management component...

5.5CVSS5.6AI score0.00463EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/08 12:00 a.m.•6 views

CVE-2024-28066: Use of Hard-coded Password

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...

8.8CVSS5.7AI score0.00448EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/04/07 11:31 p.m.•23 views

CVE-2024-3434 CP Plus Wi-Fi Camera User Management improper authorization

A vulnerability classified as critical was found in CP Plus Wi-Fi Camera up to 20240401. Affected by this vulnerability is an unknown functionality of the component User Management. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclos...

5.5CVSS6.8AI score0.00463EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/04/07 11:31 p.m.•50 views

CVE-2024-3434 CP Plus Wi-Fi Camera User Management improper authorization

A vulnerability classified as critical was found in CP Plus Wi-Fi Camera up to 20240401. Affected by this vulnerability is an unknown functionality of the component User Management. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclos...

5.5CVSS5.9AI score0.00463EPSS
SaveExploits0References4
CVE
CVE
•added 2024/04/07 11:31 p.m.•136 views

CVE-2024-3434

CVE-2024-3434 affects CP Plus Wi‑Fi Camera (up to 20240401); the vulnerability lies in the User Management component and causes improper authorization. The issue can be exploited remotely; the exploit has been disclosed publicly. Available documents confirm the affected versions and the remote at...

5.5CVSS5.6AI score0.00463EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•19 views

PT-2024-25796 · Cp Plus · Cp Plus Wi-Fi Camera

Name of the Vulnerable Software and Affected Versions: CP Plus Wi-Fi Camera versions up to 20240401 Description: A critical issue was found in the User Management component, leading to improper authorization. The manipulation can be launched remotely. The issue affects an unknown functionality of...

5.5CVSS7AI score0.00463EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•6 views

CVE-2024-3434: Improper Authorization

A vulnerability classified as critical was found in CP Plus Wi-Fi Camera up to 20240401. Affected by this vulnerability is an unknown functionality of the component User Management. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclos...

5.5CVSS5.1AI score0.00463EPSS
SaveExploits0References2
NVD
NVD
•added 2024/04/05 6:15 p.m.•19 views

CVE-2024-28065

In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash...

5.9CVSS6.5AI score0.0023EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/05 12:00 a.m.•7 views

PT-2024-22246

Name of the Vulnerable Software and Affected Versions Unify CP IP Phone version 1.10.4.3 Description The issue concerns the lack of encryption for files in the firmware, which results in the exposure of sensitive information, including the root password hash. Recommendations For Unify CP IP Phone...

5.9CVSS5.7AI score0.0023EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/04/05 12:00 a.m.•19 views

CVE-2024-28065

In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash...

6.9AI score0.0023EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/05 12:00 a.m.•5 views

CVE-2024-28065: Cleartext Storage of Sensitive Information

In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash...

5.9CVSS5.8AI score0.0023EPSS
SaveExploits0References2
CVE
CVE
•added 2024/04/05 12:00 a.m.•75 views

CVE-2024-28065

The Unify CP IP Phone (version 1.10.4.3 ) is affected by a security vulnerability where files in the firmware are not encrypted. This lack of encryption leads to the exposure of sensitive information , specifically the root password hash . To mitigate this risk until a formal patch is released, i...

5.9CVSS6.8AI score0.0023EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2024/03/29 12:00 a.m.•21 views

CP Media Player < 1.2.0 - Player Deletion and Duplication via CSRF

Description The plugin is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the adminpage function. This makes it possible for unauthenticated attackers to delete or duplicate existing audio or video players via a forged request granted they can trick a site...

6.7AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/03/25 12:15 p.m.•36 views

CVE-2023-25039

Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...

8.8CVSS4.7AI score0.00497EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/25 11:46 a.m.•46 views

CVE-2023-25039 WordPress Google Maps CP plugin <= 1.0.43 - Missing Authorization Leading To Feedback Submission Vulnerability

Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...

4.3CVSS5AI score0.00497EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/25 11:46 a.m.•90 views

CVE-2023-25039

CVE-2023-25039 : WordPress Google Maps CP plugin (CodePeople Google Maps CP)

8.8CVSS8AI score0.00497EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/03/25 12:00 a.m.•36 views

WordPress Plugin Google Maps CP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS8.1AI score0.00497EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/25 12:00 a.m.•6 views

CVE-2023-25039: Missing Authorization

Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...

8.8CVSS7.8AI score0.00497EPSS
SaveExploits0References2
Rows per page
Query Builder