1600 matches found
PT-2023-24875 · Unknown · Piigab M-Bus
Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns the use of a weak hash algorithm for storing passwords. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series Missing Password Field Masking (CVE-2023-2062)
Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/...
CVE-2023-3458
A vulnerability was found in SourceCodester Shopping Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file forgot-password.php. The manipulation of the argument contact leads to sql injection. The attack can be launched remotely. The...
CVE-2023-25366
In Siglent SDS 1104X-E SDS1xx4X-EV6.1.37R9.ADS, insecure SCPI interface discloses web password...
Design/Logic Flaw
A plaintext storage of a password vulnerability CWE-256 in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate...
CVE-2023-26204
CVE-2023-26204 describes a plaintext storage of admin credentials in FortiSIEM, affecting Fortinet FortiSIEM versions 6.7, 6.6, 6.5, 6.4, 6.3, 6.2, 6.1, 5.4, and 5.3. The root cause is storage of passwords in plaintext (CWE-256), which may allow an attacker with access to the user database to imp...
PT-2023-3035 · Cisco · Cisco Telepresence Video Communication Server +1
Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS affected versions not specified Description: A vulnerability in the change password functionality could allow an authenticated, remote attacker with Read-only...
The vulnerability of the LoginPassword function in the application software interface of D-Link DIR-2150 router software allows a hacker to bypass existing security restrictions.
The vulnerability of the LoginPassword function in the application software interface of D-Link DIR-2150 router software relates to the bypassing of authentication processes. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions by using a specially created...
CVE-2023-32699 MeterSphere denial of service vulnerability
MeterSphere is an open source continuous testing platform. Version 2.9.1 and prior are vulnerable to denial of service. The checkUserPassword method is used to check whether the password provided by the user matches the password saved in the database, and the CodingUtil.md5 method is used to...
Weak Password Vulnerability in Sky Mirror Web Application Detection System of Beijing Qixingchen Information Security Technology Co.
Beijing Qixingchen Information Security Technology Co., Ltd. is an enterprise mainly engaged in science and technology promotion and application service industry. A weak password vulnerability exists in the Sky Mirror Web Application Detection System of Beijing Qixingchen Information Security...
CVE-2023-31098
Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.6.0. When users change their password to a simple password with any character or symbol, attackers can easily guess the user's password and access the...
File Tracker Manager System SQL注入漏洞
File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter newpassword in the file register/updatepassword.php against externally entered SQL statements. A...
CVE-2023-31150 Storing Passwords in a Recoverable Format
A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11-15 for more details...
CVE-2023-24796
Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...
PT-2023-19786 · Vinga · Vinga Wr-Ac1200
Name of the Vulnerable Software and Affected Versions: Vinga WR-AC1200 versions 81.102.1.4370 and before Description: A password vulnerability allows a remote attacker to execute arbitrary code via the password parameter at the "/goform/sysTools" and "/adm/systools.asp" endpoints. This issue has...
CVE-2023-24796
CVE-2023-24796 affects the Vinga WR-AC1200 router (versions 81.102.1.4370 and earlier). A vulnerability in the password parameter exposed via the /goform/sysTools and /adm/systools.asp endpoints allows a remote attacker to run arbitrary code. Several connected sources confirm the affected product...
CVE-2023-24796
Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...
CVE-2023-24796
Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...