CVE-2022-30328

CVE-2022-30328 affects TRENDnet TEW-831DR 1.0 with firmware 601.130.1.1356. The web interface’s username/password setup does not require the existing password, allowing an attacker to change the interface credentials. This vulnerability enables an unauthorized user to modify access credentials fo...

PT-2022-2949 · Spacelogic +1 · Spacelogic C-Bus Application Controller +3

Name of the Vulnerable Software and Affected Versions: C-Bus Network Automation Controller - LSS5500NAC versions prior to V1.10.0 Wiser for C-Bus Automation Controller - LSS5500SHAC versions prior to V1.10.0 Clipsal C-Bus Network Automation Controller - 5500NAC versions prior to V1.10.0 Clipsal...

CVE-2022-28385

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to missing integrity checks, an attacker can manipulate the content of the emulated CD-ROM drive containing the Windows and macOS client software. The content of this emulated CD-ROM drive is stored as an ISO-9660 image in...

Weak Password Vulnerability in Siemens Smart Energy Management Platform

Siemens is a technology-focused company that provides solutions for customers in the areas of power generation and transmission and distribution, infrastructure, industrial automation, drives and software through innovations in electrification, automation and digitalization. A weak password...

CVE-2022-21951 Rancher: Weave CNI password is not set if RKE template is used with CNI value overridden

A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This...

Sql injection

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

Dolibarr allows password changes without supplying the current password

Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physically proximate attackers to obtain access via an unattended workstation...

CVE-2022-27172

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-1698

Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications...

Beijing Netnifty Security Gateway has a weak password vulnerability

Beijing Netnifty Information Technology Company is a leading enterprise in the domestic information security industry, specializing in the research and development, production and sales of information security products, and providing hierarchical overall security solutions and security profession...

Important: Red Hat Security Advisory: convert2rhel security update

A security update for convert2rhel is now available for unsupported conversions of CentOS Linux 6 and Oracle Linux 6 to Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...

Weak Password Vulnerability in TAS Management Console of Beijing Huayu Information Technology Co.

Ltd. is an intelligent information service company with software and information service as its main business. A weak password vulnerability exists in the TAS management console of Beijing Huayu Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

Command injection

The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default enabled on trusted interfaces. While the...

Design/Logic Flaw

The programming protocol allows for a previously entered password and lock state to be read by an attacker. If the previously entered password was successful, the attacker can then use the password to unlock Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00...

CVE-2021-45031

A vulnerability in MEPSAN's USC+ before version 3.0 has a weakness in login function which lets attackers to generate high privileged accounts passwords...

Use of cryptographically weak random number generator for password generation

Description Umbraco has a GeneratePassword function that is used to generate passwords that should be unpredictable, this function uses the .NET Random class which isn't cryptographically secure. Impact This vulnerability is capable of allowing attackers to predict generated passwords and use the...

Design/Logic Flaw

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is required to execute privileged commands. The password value passed to ISaGRAF Runtime is the result of encryption performed with a fixed key value using the tiny encryption algorithm...

PT-2022-1803 · Terramaster · Terramaster Tos

Name of the Vulnerable Software and Affected Versions: TerraMaster OS versions 4.2.29 and earlier Description: The issue is related to the webNasIPS module in TerraMaster OS, which allows for the injection of arbitrary commands. This can enable a remote attacker to gain access to protected...

Weak Password Vulnerability in InforSuite AS of Shandong Zhongchuang Software Commercial Middleware Co.

InforSuite AS is an enterprise-class middleware certified as fully compatible with Jakarta EE 9, 8 and Java EE8, 7, 6. Ltd. InforSuite AS has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in Xintiandi wireless GPRS meter reading and monitoring management system

The wireless GPRS meter reading and monitoring management system is a system designed mainly for metering, management, monitoring and analysis of urban water supply network. There is a weak password vulnerability in Xintiandi wireless GPRS meter reading and monitoring management system, which can...