Ewebeditor for the latest vulnerabilities and exploits Daquan[collection]-vulnerability warning-the black bar safety net

Article source: The following article in the collection is reproduced in the network: is a relatively comprehensive ewebeditor editor of the vulnerabilities collected, and now the website most of the ewebeditor editor, So ewebeditor vulnerability to the hazards is still quite large, do a bit of t...

CrashPlan Server Default Administrative Credentials

The remote host is running CrashPlan or CrashPlan PRO Server, the server component of CrashPlan, a cross-platform backup application. The remote installation of CrashPlan Server is configured to use default credentials to control administrative access. Knowing these, an attacker can gain...

VICIDIAL Call Center Suite Default Administrative Credentials

The remote host is running the VICIDIAL Call Center Suite, a set of programs for Asterisk that act as a complete call center suite. The remote installation of VICIDIAL is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative...

Default credentials

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access...

A-A-S Application Access Server Default Admin Password

The remote installation of A-A-S Application Access Server is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative control of the affected application and host. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

Default credentials

system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully condu...

Oracle GlassFish Server Administration Console Default Credentials

It is possible to log into the remote Oracle GlassFish administration console by providing default credentials. Knowing these, an attacker can gain administrative control of the affected application server and, for example, install hostile applets. %NASLMINLEVEL 70300 C Tenable Network Security,...

Comtrend HG536+ Privilege Escalation

Comtrend HG536+ vulnerabilities Vendor url:www.comtrend.com Advisore Url:http://lostmon.blogspot.com/2009/04/ comtrend-hg536-vulnerabilities.html Vendor notify: NO Description By vendor The HG536+ is an 802.11g 54Mbps wireless and wired Local Area Network WLAN ADSL router. Four 10/100 Base-T...

Opentaps ERP + CRM Default Credentials (HTTP)

Opentaps ERP + CRM is using known default credentials. SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

Default credentials

UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credentials by listing the process...

Default credentials

VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password...

CVE-2008-6588

Aztech ADSL2/2+ 4-port router has a default "isp" account with a default "isp" password, which allows remote attackers to obtain access if this default is not changed...

Tenable Security Center Default Credentials

Tenable Network Security's Security Center, an asset-based security and compliance monitoring application, is installed on the remote system. By supplying default credentials, it is possible to log into the remote web application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default credentials

Sun Java System Identity Manager IdM 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

Default credentials

The Change My Password implementation in the admin interface in Sun Java System Identity Manager IdM 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the...

Default credentials

blogadata/include/initpass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter...

CVE-2009-0620

Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.1 uses default 1 usernames and 2 passwords for a the administrator and b web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access...

Design/Logic Flaw

Cisco ACE 4710 Application Control Engine Appliance before A18a uses default 1 usernames and 2 passwords for a the administrator, b web management, and c device management, which makes it easier for remote attackers to perform configuration changes to the Device Manager and other components, or...

Default credentials

Cisco Application Networking Manager ANM before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to "default user credentials during installation."...

Default credentials

The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information...