710 matches found
CVE-2013-1053
The CVE-2013-1053 entry refers to an insecure crypto implementation in the crypt.c module of remote-login-service, enabling an attacker to recover usernames and passwords stored in the cache for version 1.0.0-0ubuntu3 and earlier. The issue is confined to the cryptographic storage of credentials ...
Canonical Ubuntu Remote-login-service Encryption Issue Vulnerability
Canonical Ubuntu is a desktop-oriented GNU/Linux operating system from the British company Canonical. A security vulnerability exists in Canonical Ubuntu's remote-login-service service, which stems from an insecure encryption algorithm used to cache usernames and passwords in crypt.c of...
Trust Management Issues Vulnerabilities in Various Amino Communications Products
The Amino Communications AK45x series, among others, is a family of television set-top box devices from Amino UK. Amino Communications has a trust management issue vulnerability in a number of its products, which arises from a root user hard-coded SSH key that can be exploited by an attacker to...
CVE-2020-10210
Because of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series, Kami7B, an attacker may remotely log in through SSH...
Hardcoded credentials
Because of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series, Kami7B, an attacker may remotely log in through SSH...
CVE-2020-10210
Because of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series, Kami7B, an attacker may remotely log in through SSH...
Amino Communications 多款产品信任管理问题漏洞
The Amino Communications AK45x series, among others, is a family of television set-top box devices from Amino UK. Amino Communications has a trust management issue vulnerability in a number of its products, which arises from a root user hard-coded SSH key that can be exploited by an attacker to...
Zyxel USG Series Encryption Issues Vulnerabilities
The Zyxel USG Series is a series of firewall devices from Zyxel, China, for use in corporate environments. A security vulnerability exists in Zyxel USG devices Firmware version 4.60, which stems from the inclusion of an undocumented account zyfwp and an unchangeable password. The password for thi...
CVE-2020-15376
Brocade Fabric OS versions before v9.0.0 and after version v8.1.0, configured in Virtual Fabric mode contain a weakness in the ldap implementation that could allow a remote ldap user to login in the Brocade Fibre Channel SAN switch with "user" privileges if it is not associated with any groups...
CVE-2020-15376
CVE-2020-15376 affects Brocade Fabric OS versions before v9.0.0 and after v8.1.0 when configured in Virtual Fabric mode. The vulnerability stems from a weakness in the LDAP implementation, which could allow a remote LDAP user to log in to a Brocade Fibre Channel SAN switch with only “user” privil...
CVE-2020-29054
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices...
Verve Connect VH510 Trust Management Issue Vulnerability
The Verve Connect VH510 is a hub for home applications from Verve Connect UK. The device regenerates and shapes and amplifies the received signal to extend the transmission distance of the network while concentrating all nodes on the node centered on it. A security vulnerability exists in version...
CVE-2020-27689
The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains undocumented default admin credentials for the web management interface. A remote attacker could exploit this vulnerability to login and execute commands on the device, as well as upgrade the firmware image to a...
NEC SV9100 PBX Trust Management Issue Vulnerability
The NEC SV9100 PBX is a unified communications solution from Nippon Electric NEC. A security vulnerability exists in NEC SV9100 PBX version 6.0 and later. A remote attacker could exploit the vulnerability to log in to the device using manufacturer-level access...
CVE-2020-4429
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534...
GaussDB: Removing the Remote Login Permission from the Database OS Account
The database OS account has the permission to access all database files. Once the password of this account is disclosed, the database is threatened. Removing the remote permission from this account improves database security. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might ...
TeamViewer Insecure Directory Permissions Privilege Escalation
The version of TeamViewer Desktop installed on the remote Windows host upto 14.7.1965 allows a bypass of remote-login access control where different customers' used a shared AES key for all installations. Attacker can used the said key to decrypt protected information stored in the registry or...
CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP Authorization Issues Vulnerability
CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP is a baby surveillance camera. A security vulnerability exists in the CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware version 3.4.2.0919, which stems from the program's use of weak authentication for accessing TELNET...
