Lucene search
+L

5889 matches found

NVD
NVD
•added 2022/12/19 3:15 p.m.•37 views

CVE-2022-4611

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS0.0126EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2022/12/19 12:00 a.m.•15 views

PT-2022-27741 · Click Studios · Click Studios Passwordstate +1

Name of the Vulnerable Software and Affected Versions: Click Studios Passwordstate affected versions not specified Click Studios Passwordstate Browser Extension Chrome affected versions not specified Description: A problematic vulnerability was found in Click Studios Passwordstate and Passwordsta...

5.3CVSS6.9AI score0.0126EPSS
SaveExploits2References7
Cvelist
Cvelist
•added 2022/12/19 12:00 a.m.•47 views

CVE-2022-4611 Click Studios Passwordstate hard-coded credentials

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

4.3CVSS5.6AI score0.0126EPSS
SaveExploits2References3
CVE
CVE
•added 2022/12/19 12:00 a.m.•88 views

CVE-2022-4611

CVE-2022-4611 affects Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Vulnerability details in the provided documents indicate a manipulation that results in hard-coded credentials in an unspecified part of the product, with remote initiation possible and public disclosure...

5.3CVSS4.9AI score0.0126EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/19 12:00 a.m.•6 views

CVE-2022-4611: Use of Hard-coded Credentials

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS5.3AI score0.0126EPSS
SaveExploits2References3
EUVD
EUVD
•added 2022/12/19 12:00 a.m.•19 views

EUVD-2022-51942

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS7.1AI score0.0126EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/16 12:00 a.m.•7 views

CVE-2021-35252: Use of Hard-coded Credentials

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to an attacker can be simply recovered to plaintext...

7.5CVSS5.8AI score0.00538EPSS
SaveExploits0References3
Zero Science Lab
Zero Science Lab
•added 2022/12/14 12:00 a.m.•241 views

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (sound4server) Hardcoded Credentials

Summary The SOUND4 IMPACT introduces an innovative process - mono and stereo parts of the signal are processed separately to obtain perfect consistency in terms of both sound and level. Therefore, in moving reception, when the FM receiver switches from stereo to mono and back to stereo, the sound...

9.8CVSS5.8AI score0.00596EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•15 views

PT-2022-6392 · Schneider Electric · Apc Easy Ups Online Monitoring +1

Name of the Vulnerable Software and Affected Versions: APC Easy UPS Online Monitoring Software versions prior to V2.5-GA APC Easy UPS Online Monitoring Software versions prior to V2.5-GA-01-22261 Schneider Electric Easy UPS Online Monitoring Software versions prior to V2.5-GS Schneider Electric...

7.8CVSS7.8AI score0.00163EPSS
SaveExploits0References9
ICS
ICS
•added 2022/12/13 12:00 a.m.•73 views

Schneider Electric APC Easy UPS Online

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: APC Easy UPS Online Vulnerabilities: Missing Authentication for Critical Function, Unrestricted Upload of File with Dangerous Type, Incorrect Permission Assignment for...

9.8CVSS9.9AI score0.01071EPSS
SaveExploits0References4
OSV
OSV
•added 2022/12/07 10:15 a.m.•15 views

CVE-2022-34840

Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as follows: WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier,...

6.5CVSS5.8AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/07 10:15 a.m.•26 views

CVE-2022-34840

Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as follows: WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier,...

6.5CVSS0.00251EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/07 10:15 a.m.•28 views

Hardcoded credentials

Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as follows: WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier,...

3.3CVSS6.5AI score0.00251EPSS
SaveExploits0References2Affected Software9
Positive Technologies
Positive Technologies
•added 2022/12/07 12:00 a.m.•18 views

PT-2022-22390 · Buffalo · Wzr-450Hp-Cwt +8

Name of the Vulnerable Software and Affected Versions: WZR-300HP firmware Ver. 2.00 and earlier WZR-450HP firmware Ver. 2.00 and earlier WZR-600DHP firmware Ver. 2.00 and earlier WZR-900DHP firmware Ver. 1.15 and earlier HW-450HP-ZWE firmware Ver. 2.00 and earlier WZR-450HP-CWT firmware Ver. 2.00...

6.5CVSS6.4AI score0.00251EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/07 12:00 a.m.•3 views

CVE-2022-34840: Use of Hard-coded Credentials

Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as follows: WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier,...

6.5CVSS5.9AI score0.00251EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/07 12:00 a.m.•40 views

CVE-2022-34840

Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as follows: WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier,...

6.8AI score0.00251EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/07 12:00 a.m.•21 views

CVE-2022-34840

Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of the device. The affected products/versions are as follows: WZR-300HP firmware Ver. 2.00 and earlier, WZR-450HP firmware Ver. 2.00 and earlier,...

6.6AI score0.00251EPSS
SaveExploits0References2
CVE
CVE
•added 2022/12/07 12:00 a.m.•81 views

CVE-2022-34840

CVE-2022-34840 concerns a hard-coded credentials vulnerability in Buffalo network devices. The affected models include WZR-300HP, WZR-450HP, WZR-600DHP, WZR-900DHP, HW-450HP-ZWE, WZR-450HP-CWT, WZR-450HP-UB, WZR-600DHP2, and WZR-D1100H, with firmware versions as listed (older than specified updat...

6.5CVSS7AI score0.00251EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/05 12:00 a.m.•7 views

CVE-2022-40242: Use of Hard-coded Credentials

MegaRAC Default Credentials Vulnerability...

9.8CVSS8.3AI score0.0068EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/05 12:00 a.m.•2 views

CVE-2022-40259: Use of Hard-coded Credentials

MegaRAC Default Credentials Vulnerability...

9.8CVSS8.3AI score0.00672EPSS
SaveExploits0References3
Rows per page
Query Builder