CVE-2018-15719

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

Default credentials

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

CVE-2018-15719

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

CVE-2018-15719

Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information...

CVE-2018-15719

Open Dental before version 18.4 ships with a MySQL database and uses default credentials of root with a blank password, enabling anyone on the network with access to the server to access all database information. Remediate by upgrading to version 18.4 or later (details in provided sources).

Default credentials

DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field...

Default credentials

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field...

Default credentials

DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field...

Default credentials

DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field...

Default credentials

DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field...

Cisco Energy Management Suite Access Bypass Vulnerability

Cisco Energy Management Suite CEMS is a set of energy management suite of the United States Cisco Cisco. The product is mainly used to manage network equipment such as energy management. A security vulnerability exists in the configuration of the local database of Cisco CEMS, which originates fro...

Design/Logic Flaw

A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite CEMS could allow an authenticated, local attacker to access and alter confidential data. The vulnerability is due to the installation of the PostgreSQL database with unchanged default...

CVE-2018-0468

A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite CEMS could allow an authenticated, local attacker to access and alter confidential data. The vulnerability is due to the installation of the PostgreSQL database with unchanged default...

Default credentials

An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server...

Default credentials

DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields...

Default credentials

DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields...

Intelbras NCLOUD 300 Router Default Credentials (Telnet)

Intelbras NCLOUD 300 Router have a default telnet password set. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-9083

In System Management Module SMM versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability...

Default credentials

In System Management Module SMM versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability...

CVE-2018-9083

In System Management Module SMM versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability...