4267 matches found
PT-2024-22903 · Unknown · Ros2 Humble Hawksbill
Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill version 2 Description: An issue was discovered in the default configurations of ROS2 Humble Hawksbill, allowing unauthenticated attackers to gain access using default credentials. Recommendations: For ROS2 Humble Hawksbi...
CVE-2024-30711
CVE-2024-30711 entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-29447
ROS2 Humble Hawksbill (version 2) is identified in connected sources as having an issue where default configurations allow unauthenticated access via default credentials. This vulnerability surface is tied to the default credential behavior, enabling unauthorized access if defaults are not change...
CVE-2024-30728
CVE-2024-30728 is rejected/withdrawn and does not represent an active vulnerability entry.
CVE-2024-30695
This CVE entry is rejected/not used as stated.
PT-2024-23574 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Galactic Geochelone versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: An issue was discovered in the default configurations, allowing unauthenticated attackers to gain access using default credentials. Recommendations: For ROS...
The vulnerability of the cross-platform BitTorrent client qBittorrent, which stems from the use of rigidly programmed credentials, allows a hacker to execute arbitrary commands.
The vulnerability of the cross-platform BitTorrent client qBittorrent relates to the use of default credentials when the user’s web interface is enabled. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2024-23561 · Unknown · Ros2 Iron Irwini
Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: An issue was discovered in the default configurations of ROS2 Iron Irwini, allowing unauthenticated attackers to authenticate using default credentials. Recommendations: For ROS2 Iron Irwini version 2,...
PT-2024-23551 · Ros · Ros
Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Melodic Morenia version 1 Description: An issue was discovered in the default configurations of ROS, allowing unauthenticated attackers to gain access using default credentials, posing a serious threat to the...
PT-2024-23602 · Ros · Ros
Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Kinetic Kame version 1 Description: An issue was discovered in the default configurations of ROS, allowing unauthenticated attackers to gain access using default credentials. Recommendations: For ROS Robot Operating...
CVE-2023-31634
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...
CVE-2023-31634
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...
CVE-2024-28093
The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account...
CVE-2024-28093
The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account...
Adtran NetVanta 3120 安全漏洞
The Adtran NetVanta 3120 is a fixed-port Ethernet router from Adtran USA. A security vulnerability exists in the Adtran NetVanta 3120 version 18.01.01.00.E. The vulnerability stems from the device's TELNET service being enabled by default and having default credentials for a root-level account...
CVE-2024-28093
CVE-2024-28093 affects AdTran NetVanta 3120 devices running version 18.01.01.00.E, where TELNET is enabled by default and uses a root-level credential. The issue is tied to default/root access and could allow unauthorized device access. Mitigation: disable TELNET or restrict access, and apply pat...
CVE-2024-28093
The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account...
Default credentials
The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.68 via the 'getposts' REST API Endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including full draft...
Default credentials
If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default...