4279 matches found
Default credentials
EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...
Default credentials
In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms...
Default credentials
Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...
Default credentials
eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...
Default credentials
A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the...
EasyLobby Solo Default Management Credentials Vulnerability
HID Global EasyLobby Solo is a suite of Secure Visitor Management SVM software from HID Global, USA. A security vulnerability exists in HID Global EasyLobby Solo version 11.0.4563, which stems from the program's use of default administrative credentials. A local attacker could exploit the...
eVisitorPass Default Management Credentials Vulnerability
Threshold eVisitorPass is a visitor management system from Threshold Canada. A security vulnerability exists in Threshold eVisitorPass version 1.5.5.2 that stems from the program's use of default administrative credentials. A local attacker could exploit the vulnerability to gain full access to t...
Intellio Visus Default Credentials (HTTP)
The remote installation of Intellio Visus is using known default credentials. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published b...
CVE-2018-17485
Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...
CVE-2018-17492
EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...
CVE-2018-17497
eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application...
CVE-2018-17492
CVE-2018-17492 affects EasyLobby Solo (HID Global EasyLobby Solo) where default administrative credentials are present. The root cause is the use of default credentials, enabling a local attacker to gain full access to the application. The vulnerability is documented with a high impact in CVSS v3...
CVE-2018-17497
CVE-2018-17497 affects eVisitorPass. It reports default administrative credentials that could let a local attacker gain full access to the application. CVSSv3.0 base score 7.8 (HIGH) with LOCAL access, low attack complexity, no user interaction, and HIGH confidentiality, integrity, and availabili...
CVE-2018-17485
CVE-2018-17485 affects Lobby Track Desktop. The vulnerability arises from default administrative credentials, enabling a local attacker to gain full access to the application. The linked sources confirm the issue exists and that mitigations/patches have been released by vendors in some reports; p...
Mirai Variant Adds Dozen New Exploits to Target Enterprise IoT Devices
Security researchers have uncovered a new variant of the infamous Mirai Internet of Things botnet, this time targeting embedded devices intended for use within business environments in an attempt to gain control over larger bandwidth to carry out devastating DDoS attacks. Although the original...
Mirai Variant Adds Dozen New Exploits to Target Enterprise IoT Devices
Security researchers have uncovered a new variant of the infamous Mirai Internet of Things botnet, this time targeting embedded devices intended for use within business environments in an attempt to gain control over larger bandwidth to carry out devastating DDoS attacks. Although the original...
Amcrest Technologies IP Camera Default Credentials (HTTP)
The remote installation of Amcrest Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...
GW Security IP Camera Default Credentials (HTTP)
The remote installation of GW Security Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...