VDA 2203 OS Windows 11 || Username password incorrect with domain passthrough and SSON not working

Username password incorrect with domain passthrough and SSON not working...

Siemens InsydeH2O Plaintext Storage of a Password (CVE-2021-38489)

An issue was discovered in the the HddPasswordPei driver of the Insyde InsydeH2O 5.x. HDD password is stored in plaintext. This plugin only works with Tenable.ot Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc';...

Linux Distros Unpatched Vulnerability : CVE-2016-0726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Fedora Nagios package uses nagiosadmin as the default password for the nagiosadmin administrator account, which makes it easier for remote attackers to obta...

Linux Distros Unpatched Vulnerability : CVE-2014-0175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mcollective has a default password set at install CVE-2014-0175 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL...

RuoYi vulnerable to Denial of Service by attackers with admin privileges

An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service DoS by duplicating the login name of the account...

GHSA-QQ5H-RJJ9-Q9QG RuoYi vulnerable to Denial of Service by attackers with admin privileges

An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service DoS by duplicating the login name of the account...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CVE-2024-53865

CVE-2024-53865 affects the Python package zhmcclient, a client library for IBM Z HMC Web Services API. The issue is that in affected versions, password-like properties are written in clear text to API and HMC logs in several operations: boot-ftp-password and ssc-master-pw when creating/updating p...

RHEL 8 : pam (RHSA-2024:10379)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10379 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...

Unspecified vulnerability in Tenda N300F3 (CNVD-2025-16317)

The Tenda N300F3 is Tenda's wireless router designed for small office and home office environments. A security vulnerability exists in the Tenda N300F3 that originates from allowing a user to bypass the intended security policy and create weak passwords. No detailed vulnerability details are...

CVE-2024-23486

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials...

CVE-2024-23486

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials...

CVE-2024-23486

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials...

CVE-2023-50035

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...

ADM HA "Not valid password or incorrect host IP or the host is unable to respond the the request"

When adding the primary ADM on the secondary ADM, the customer encountered the following error: "Not valid password or incorrect host IP or the host is unable to respond to the request."...

PT-2023-25639 · Loxone · Loxone Miniserver Go Gen.2

Name of the Vulnerable Software and Affected Versions: Loxone Miniserver Go Gen.2 versions prior to 14.2 Description: The issue allows a local user to calculate the root password and escalate privileges due to the root password being calculated using hard-coded secrets and the MAC address...

Citrix FAS - Incorrect username and password

Incorrect username and password FAS After launching desktop when users tries to log on. No error on the certificates, no error in "Application" and "System" in the FAS server. VDA event logs Windows logs Security and looking for audit failure at the same time as the login failure: 0xC000006A| use...

PT-2023-19931 · Apple +2 · Apple Macos +3

Name of the Vulnerable Software and Affected Versions: PowerPanel Business Local/Remote for Windows versions 4.8.6 and earlier PowerPanel Business Management for Windows versions 4.8.6 and earlier PowerPanel Business Local/Remote for Linux 32bit versions 4.8.6 and earlier PowerPanel Business...

Fluent Fluentd and Fluent-ui use default password

An issue was discovered in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2 that allows attackers to gain escilated privileges and execute arbitrary code due to use of a default password...

SUSE-SU-2023:1684-1 Security update for samba

This update for samba fixes the following issues: - CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext bso15315 bsc1209481. The following non-security bug was fixed: - Prevent use after free of messagingctdbfdeev structs bso15293 bsc1207416...