TotoLink A720R 安全漏洞

The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. The TOTOLINK A720R suffers from a command execution vulnerability that stems from improper design or implementation during code development of the network system. The vulnerability can be exploited by an...

CVE-2021-37843

The CVE-2021-37843 issue affects Atlassian SAML SSO apps and allows a remote attacker to login to a user account knowing only the username (no additional authentication). Fixed versions include Jira: 3.6.6.1, 4.0.12, 5.0.5; Confluence: 3.6.6, 4.0.12, 5.0.5; Bitbucket: 2.5.9, 3.6.6, 4.0.12, 5.0.5;...

Dell EMC Data Protection Advisor 安全漏洞

Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports data backup, data recovery, and data replication management. A security vulnerability exists in Dell EMC Data Protection Advisor versions 6.4, 6.5, and 18.1, which arises from the affect...

Vulnerability of Telnet and SSH services on the Android emulator AndyOS, allowing attackers to elevate their privileges to root level.

The vulnerability of Telnet and SSH services in the Android emulator AndyOS is related to authentication flaws. Exploiting this vulnerability can allow a hacker to gain root-level privileges...

CHYUI 授权问题漏洞

The Chiyu CHIYU BF-430 is a networking server that provides communication for access control, time and attendance systems, and other devices from Chiyu Technology Chiyu of Taiwan, China. A security vulnerability exists in various CHIYU products, which stems from the fact that the remote login...

CVE-2021-28799

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...

CVE-2021-28799

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...

CVE-2021-28799

CVE-2021-28799 is an improper authorization vulnerability affecting QNAP HBS 3 on various QTS/QuTS versions. The flaw allows remote attackers to log in to affected devices. Affected: HBS 3 on QTS 4.5.2 (prior to v16.0.0415); QTS 4.3.6 (prior to v3.0.210412); QTS 4.3.4 (prior to v3.0.210411); QTS ...

Microsoft Azure和Microsoft Azure Stack 安全漏洞

Microsoft Azure and Microsoft Azure Stack are both products of Microsoft Corporation, USA.Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms.Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform. . The product supports...

CVE-2021-21505

Dell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an undocumented default iDRAC account. A remote unauthenticated attacker, with the knowledge of the default credentials, could potentially exploit this to log in to the system to gain root privileges...

VulnCheck KEV: CVE-2021-28799

QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device...

CVE-2021-20697

CVE-2021-20697 affects the D-Link DAP-1880AC firmware, where Missing authentication for a critical function allows a remote attacker to login as a low-privileged user without the access privilege via unspecified vectors. The issue is documented across multiple sources, noting that firmware versio...

Svakom Siime Eye License Issue Vulnerability

Svakom Siime Eye is a smart home device from Svakom USA. A security vulnerability exists in Svakom Siime Eye version 14.1.00000001.3.330.0.0.3.14, which stems from a vulnerability used to open the server's telnet service using setparams.cgi?telnetd=1 & save=1 & reboot=1, which allows an attacker ...

Svakom Siime Eye 授权问题漏洞

Svakom Siime Eye is a smart home device from Svakom USA. A security vulnerability exists in Svakom Siime Eye version 14.1.00000001.3.330.0.0.3.14, which stems from a vulnerability used to open the server's telnet service using setparams.cgi?telnetd=1 & save=1 & reboot=1, which allows an attacker ...

CVE-2013-1053

In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions...

CVE-2013-1053

In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions...

Default credentials

In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions...

CVE-2013-1053 Insecure crypto for storing passwords

In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions...

CVE-2013-1053

The CVE-2013-1053 entry refers to an insecure crypto implementation in the crypt.c module of remote-login-service, enabling an attacker to recover usernames and passwords stored in the cache for version 1.0.0-0ubuntu3 and earlier. The issue is confined to the cryptographic storage of credentials ...

Canonical Ubuntu Remote-login-service Encryption Issue Vulnerability

Canonical Ubuntu is a desktop-oriented GNU/Linux operating system from the British company Canonical. A security vulnerability exists in Canonical Ubuntu's remote-login-service service, which stems from an insecure encryption algorithm used to cache usernames and passwords in crypt.c of...