Default credentials

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static...

Capsule Technologies SmartLinx Neuron 2 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Low skill level to exploit/public exploits are available Vendor: Capsule Technologies Equipment: SmartLinx Neuron 2 Vulnerability: Protection Mechanism Failure 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

Critical Apache Guacamole Flaws Put Remote Desktops at Risk of Hacking

A new research has uncovered multiple critical reverse RDP vulnerabilities in Apache Guacamole , a popular remote desktop application used by system administrators to access and manage Windows and Linux machines remotely. The reported flaws could potentially let bad actors achieve full control ov...

The vulnerability of Cisco IOS XE SD-WAN software, related to authentication flaws, allows a hacker to gain full control over the device.

The vulnerability of Cisco IOS XE SD-WAN software is related to authentication deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the device...

The vulnerability of the Core virtual network interface e1000 in the Oracle VM VirtualBox virtual machine allows a hacker to gain full control over the application.

The vulnerability of the e1000 network interface component in the Oracle VM VirtualBox virtual machine relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Security component of the Oracle Retail Store Inventory Management software allows a hacker to gain full control over the application.

The vulnerability of Oracle Retail Store Inventory Management’s Security component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP protocol...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the VBoxVGA graphics controller component in the Oracle VM VirtualBox virtual machine allows a hacker to gain full control over the application.

The vulnerability of the VBoxVGA graphics controller in the Oracle VM VirtualBox virtual machine is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the software for configuring Schneider Electric Easergy Builder lies in the use of a less secure encryption algorithm, which allows an attacker to gain full access to the device.

The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers is related to the use of a less secure encryption algorithm. Exploiting this vulnerability could allow an attacker to gain access to the user credentials of the device, thereby granting full control...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain full control over the application.

The vulnerability of the Core component in Oracle VM VirtualBox is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Spring Framework component of the Oracle Retail Order Broker software product allows a hacker to gain full control over the application.

The vulnerability of the Spring Framework component of the Oracle Retail Order Broker product exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow an attacker to gain full control over the application using the HTTP protocol...

The vulnerability of the Promotions component of the Oracle Retail Customer Management and Segmentation Foundation software allows a hacker to gain full control over the application.

The vulnerability of the Promotions component in Oracle Retail Customer Management and Segmentation Foundation software is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain full control over the application using the HTTP protocol...

The vulnerability of the Node.js software platform, related to insufficient validation of input data during the processing of HTTP headers, allows a hacker to gain full control over the application.

The vulnerability of the Node.js software platform is related to insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability allows a malicious actor to gain full control over an application through various network protocols...

The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application through the IIOP and T3 network protocols...

The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application through the IIOP and T3 network protocols...

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software platform allows a hacker to gain full control over the application.

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application through the HTTP network...

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms allows a perpetrator to gain full control over the application.

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application by using various network protoco...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the integrity_check command in the PRAGMA implementation of the SQLite database management system allows a hacker to gain full control over the application.

The vulnerability of the integritycheck command in the PRAGMA implementation of the SQLite database management system is related to insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the...