ZTE ZXR10 1800-2S ZSRV2 Authentication Bypass Vulnerability

The ZTE ZXR10 1800-2S ZSRV2 is a router product from China's ZTE Corporation ZTE. An authentication bypass vulnerability exists in ZTE ZXR10 1800-2S ZSRV2 versions prior to V3.00.40, which can be exploited by a remote attacker to bypass the original password authentication protection and change...

CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

DEBIAN-CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

UBUNTU-CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

PYSEC-2018-58

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

PYSEC-2018-58

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

CVE-2018-14331

An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my...

CVE-2018-0707

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands...

QNAP Q'center Virtual Appliance Command Injection Vulnerability (CNVD-2018-17532)

QNAP Q'center Virtual Appliance is a virtual appliance from QNAP Systems for deploying Q'center QNAP NAS Management Platform in virtual environments such as Microsoft Hyper-V, VMware ESXi and Workstation. A command injection vulnerability exists in the change of password in QNAP Q'center Virtual...

GONICUS Gosa Cross-Site Scripting Vulnerability

GONICUS GOsa is an LDAP front-end management system for user administration. A cross-site scripting vulnerability exists in the password change form in versions prior to GONICUS GOsa commit 56070d6289d47ba3f5918885954dcceb75606001. A remote attacker can exploit this vulnerability to inject...

CVE-2017-0921

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised...

Design/Logic Flaw

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised...

CVE-2017-0921

GitLab Community and Enterprise Editions prior to 10.1.6, 10.2.6, and 10.3.4 are affected by an unverified password change issue in the PasswordsController that can lead to account takeover if a victim session is compromised. The vulnerability is documented across multiple sources (NVD/OSV/Ubuntu...

CVE-2017-0921

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised...

CVE-2017-0921

Removed by vendor...

OpenCart Cross-Site Request Forgery Vulnerability (CNVD-2018-13873)

OpenCart is an open source e-commerce system from OpenCart China . The system provides product reviews, product ratings, product additions and other modules. A cross-site request forgery vulnerability exists in the /upload/catalog/controller/account/password.php file in OpenCart 3.0.2.0 and earli...

Eminent EM4544 Cross-Site Scripting Vulnerability

The Eminent EM4544 is a wireless router product from the Dutch company Eminent. A security vulnerability exists in the Eminent EM4544 version 9.10, which originates from the program failing to request the user's current password when setting a new password. An attacker can exploit the vulnerabili...