Lucene search
+L

5440 matches found

CNVD
CNVD
•added 2019/01/18 12:00 a.m.•23 views

Unspecified Vulnerability in LCDS LAquis SCADA

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. A security vulnerability exists in LCDS LAquis SCADA version 4.1.0.3870, whi...

9.8CVSS7.1AI score0.02375EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/18 12:00 a.m.•3 views

CVE-2019-3907: Use of Hard-coded Credentials

Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method MD5 hash of a salt and password...

7.5CVSS5.7AI score0.00683EPSS
SaveExploits0References3
NVD
NVD
•added 2019/01/15 9:29 p.m.•23 views

CVE-2019-0022

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

10CVSS9.5AI score0.01129EPSS
SaveExploits0References1
OSV
OSV
•added 2019/01/15 9:29 p.m.•15 views

CVE-2019-0020

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

9.8CVSS5.8AI score0.01569EPSS
SaveExploits0References1
OSV
OSV
•added 2019/01/15 9:29 p.m.•14 views

CVE-2019-0022

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

9.8CVSS5.8AI score0.01129EPSS
SaveExploits0References1
NVD
NVD
•added 2019/01/15 9:29 p.m.•29 views

CVE-2019-0020

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

10CVSS9.5AI score0.01569EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/01/15 9:00 p.m.•33 views

CVE-2019-0020 Juniper ATP: Hard coded credentials used in Web Collector

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

10CVSS9.5AI score0.01569EPSS
SaveExploits0References1
CVE
CVE
•added 2019/01/15 9:00 p.m.•73 views

CVE-2019-0020

The CVE-2019-0020 entry concerns Juniper ATP: hard-coded credentials in the Web Collector component, enabling an attacker to gain full control of affected installations. Affected releases are Juniper ATP 5.0 versions prior to 5.0.3. The root cause is the presence of hard-coded credentials in the ...

10CVSS9.6AI score0.01569EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/01/15 9:00 p.m.•68 views

CVE-2019-0022

CVE-2019-0022 describes a vulnerability in Juniper ATP where the Cyphort Core instance ships with hard-coded credentials , enabling an attacker to gain full control of an affected installation. The impact affects Juniper ATP 5.0 releases prior to 5.0.3, with a network-accessible vector and high s...

10CVSS9.6AI score0.01129EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/01/15 9:00 p.m.•32 views

CVE-2019-0022 Juniper ATP: Two hard coded credentials sharing the same password give an attacker the ability to take control of any installation of the software.

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

10CVSS9.5AI score0.01129EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/15 12:00 a.m.•2 views

CVE-2019-0020: Use of Hard-coded Credentials

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

10CVSS5.8AI score0.01569EPSS
SaveExploits0References3
ICS
ICS
•added 2019/01/15 12:00 a.m.•114 views

LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME Equipment: LAquis SCADA Vulnerabilities: Improper Input Validation, Out-of-Bounds Read, Code Injection, Untrusted Pointer Dereference,...

9.8CVSS8.4AI score0.39487EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/15 12:00 a.m.•2 views

CVE-2019-0022: Use of Hard-coded Credentials

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3...

10CVSS5.8AI score0.01129EPSS
SaveExploits0References3
OSV
OSV
•added 2019/01/09 11:29 p.m.•14 views

CVE-2018-16186

RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached D5520, D6500, D6510, D7500, D8400, and the display versions with RICOH Interactive Whiteboard Controller Type2 V3....

8.8CVSS5.8AI score0.00602EPSS
SaveExploits0References2
NVD
NVD
•added 2019/01/09 11:29 p.m.•30 views

CVE-2018-16186

RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached D5520, D6500, D6510, D7500, D8400, and the display versions with RICOH Interactive Whiteboard Controller Type2 V3....

8.8CVSS8.6AI score0.00602EPSS
SaveExploits0References2
OSV
OSV
•added 2019/01/09 11:29 p.m.•11 views

CVE-2018-16201

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands...

8.8CVSS6AI score0.00602EPSS
SaveExploits0References2
NVD
NVD
•added 2019/01/09 11:29 p.m.•26 views

CVE-2018-16201

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands...

8.8CVSS8.9AI score0.00602EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/01/09 10:00 p.m.•32 views

CVE-2018-16201

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands...

8.9AI score0.00602EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/01/09 10:00 p.m.•43 views

CVE-2018-16186

RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached D5520, D6500, D6510, D7500, D8400, and the display versions with RICOH Interactive Whiteboard Controller Type2 V3....

9.3AI score0.00602EPSS
SaveExploits0References2
CVE
CVE
•added 2019/01/09 10:00 p.m.•70 views

CVE-2018-16186

CVE-2018-16186 concerns Ricoh Interactive Whiteboard devices and displays. The connected sources indicate hard-coded administrator credentials in multiple components: D2200, D5500, D5510 (V1.1–V2.2) and displays using Controller Type1 (V1.1–V2.2) attached to D5520, D6500, D6510, D7500, D8400, plu...

8.8CVSS9.1AI score0.00602EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder