4266 matches found
Modicon PLC CPU Type Default Credentials (SCADA)
Binary data 3855.prm...
Modicon Quantum HTTP Server Default Credentials
Binary data scadamodicondefaultweb.nbin...
CVE-2000-1242
The HTTP service in American Power Conversion APC PowerChute uses a default username and password, which allows remote attackers to gain system access...
CVE-2000-1242
CVE-2000-1242 concerns the HTTP service in APC PowerChute that uses a default username and password, enabling remote attackers to gain system access. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE List) with consistent description. The exact affected scope (software vers...
HSQLDB Server Default Credentials
The installation of HSQLDB on the remote host has the default 'sa' account enabled without a password. An attacker may use this flaw to execute commands against the remote host, as well as read any data it might contain. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2006-5288
Cisco 2700 Series Wireless Location Appliances before 2.1.34.0 have a default administrator username "root" and password "password," which allows remote attackers to obtain administrative privileges, aka Bug ID CSCsb92893...
CVE-2006-5288
Cisco 2700 Series Wireless Location Appliances before 2.1.34.0 have a default administrator username "root" and password "password," which allows remote attackers to obtain administrative privileges, aka Bug ID CSCsb92893...
CVE-2006-5288
The CVE-2006-5288 issue involves Cisco 2700 Series Wireless Location Appliances with a default administrator credential set: username root and password password (pre-2.1.34.0). Remote attackers could obtain administrative privileges due to this default credential configuration (Bug ID CSCsb92893)...
RE: Computer Associates eTrust Security Command Center Multiple Vulnerabilities
aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: Computer Associates - eTrust Security Command Center http://www3.ca.com/solutions/Product.aspx?ID=4351 "eTrust Security Command Center helps you discover and prioritize relevan...
Barracuda Spam Firewall contains hardcoded default login credentials
Overview Barracuda Spam Firewalls from version 3.3.01.001 to 3.3.02.053 have default login credentials that can not be modified by an administrator. Description Barracuda Spam Firewall appliances provide ingress and egress spam filtering for local area networks. An administrator will typically lo...
CVE-2006-3287
Cisco Wireless Control System WCS for Linux and Windows 4.01 and earlier uses a default administrator username "root" and password "public," which allows remote attackers to gain access aka bug CSCse21391...
CVE-2006-3287
Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier is affected by a credential disclosure issue due to a default administrator username "root" and password "public," which allows remote attackers to gain access. This exposes partial confidentiality, integrity, and availa...
CVE-2006-3287
Cisco Wireless Control System WCS for Linux and Windows 4.01 and earlier uses a default administrator username "root" and password "public," which allows remote attackers to gain access aka bug CSCse21391...
Default credentials
The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for the ldap-server, which allows remote attackers to access any server where the default has not been changed...
Default credentials
JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrat...
Sun Server Console Authentication Bypass
The remote host is running the Sun ONE Server Console, which provides an administrative interface to the Sun Java System Directory Server installed there. The Server Console instance on the remote host allows authentication using a default set of credentials - 'admin' / 'admin'. This is likely th...
Default credentials
stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display...
Default credentials
The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges...