Huawei EulerOS: Security Advisory for ipa (EulerOS-SA-2021-1196)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bosch FSM-2500 和 Bosch FSM-5000 访问控制错误漏洞

Bosch FSM-2500 and Bosch FSM-5000 are both panel-ready fire control systems from Bosch of Germany. Bosch FSM-2500 and Bosch FSM-5000 are vulnerable to a password disclosure vulnerability that could be exploited by a remote attacker to submit a special request that could gain access to sensitive...

CVE-2020-28390

A vulnerability has been identified in Opcenter Execution Core V8.2, Opcenter Execution Core V8.3. The application contains an information leakage vulnerability in the handling of web client sessions. A local attacker who has access to the Web Client Session Storage could disclose the passwords o...

CVE-2020-28390

A vulnerability has been identified in Opcenter Execution Core V8.2, Opcenter Execution Core V8.3. The application contains an information leakage vulnerability in the handling of web client sessions. A local attacker who has access to the Web Client Session Storage could disclose the passwords o...

CVE-2020-28390

CVE-2020-28390 affects Siemens Opcenter Execution Core (V8.2, V8.3). Root cause: insufficiently protected credentials exposing passwords of logged-in users via Web Client Session Storage. Impact: information disclosure of credentials, with local access originally described; ICSA-Update B notes br...

CVE-2020-35575

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9201211 beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N,...

CVE-2020-35575

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9201211 beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N,...

CVE-2020-35575

CVE-2020-35575 is a password-disclosure vulnerability in the web interface of various TP-Link devices (e.g., WA901ND family, Archer C5/C7, MR-series, WR/WRD-series). The issue allows remote attackers to obtain full administrative access to the device web panel. The public descriptions identify a ...

CVE-2020-35575

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9201211 beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N,...

Multiple Tp-Link Router Products Information Disclosure Vulnerability

Tp-link TP-Link TL-WR940N and so on are the products of China P&L Tp-link company.TP-Link TL-WR940N is a wireless router.TP-Link WR1043nd is a wireless router.TP-Link TL-WR841N is a wireless router.TP-Link TL-WR740N is a wireless router. WR740N is a wireless router.Tp-Link MR3420 and so on are...

Mozilla Firefox password leak vulnerability

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla FireFox has a password disclosure vulnerability that can be exploited by attackers to obtain password information...

M/Monit 3.7.4 Password Disclosure

Title: M/Monit 3.7.4 - Password Disclosure Author: Dolev Farhi Date: 2020-07-09 Vendor Homepage: https://mmonit.com/ Version : 3.7.4 import sys import requests url = 'http://youriphere:8080' username = 'test' password = 'test123' sess = requests.Session sess.gethost def login: print'Attempting to...

M/Monit 3.7.4 - Password Disclosure

Title: M/Monit 3.7.4 - Password Disclosure Author: Dolev Farhi Date: 2020-07-09 Vendor Homepage: https://mmonit.com/ Version : 3.7.4 import sys import requests url = 'http://youriphere:8080' username = 'test' password = 'test123' sess = requests.Session sess.gethost def login: print'Attempting to...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla FireFox has a password disclosure vulnerability that can be exploited by attackers to obtain password information...

CVE-2020-2048

CVE-2020-2048 affects Palo Alto Networks PAN-OS where the password for the configured system proxy server could be exposed in plaintext in log files when using the CLI. Affected versions are PAN-OS 8.1.x before 8.1.17, PAN-OS 9.0.x before 9.0.11, and PAN-OS 9.1.x before 9.1.2. The issue is an inf...

iDS6 DSSPro Digital Signage System 6.2 Password Disclosure

iDS6 DSSPro Digital Signage System 6.2 autoSave Cookie User Password Disclosure Vendor: Guangzhou Yeroo Tech Co., Ltd. Product web page: http://www.yerootech.com Affected version: V6.2 B2014.12.12.1220 V5.6 B2017.07.12.1757 V4.3 Summary: iDS6 Software's DSSPro network digital signage management...

iDS6 DSSPro Digital Signage System 6.2 (autoSave) Cookie User Password Disclosure

Summary iDS6 Software's DSSPro network digital signage management system is a web-based server software solution for Windows. Description The application suffers from a cleartext transmission/storage of sensitive information in a cookie when using the Remember autoSave=true feature. This allows a...

Pulse Secure Pulse Desktop Client Information Disclosure Vulnerability

Pulse Secure Pulse Desktop Client is a suite of client software from Pulse Secure USA for accessing end devices on Juniper Pulse Secure gateways. An information disclosure vulnerability exists in Pulse Secure Desktop Client Windows platform versions 9.0R5 and earlier, 9.1R4 and earlier. The...

CVE-2020-8956

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled...

D-Link DCS IP Camera Devices Multiple Vulnerabilities (SAP10180) - Active Check

Multiple D-Link DCS IP camera devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: Running agains...