708 matches found
CVE-2018-20869: Improper Input Validation
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin SEC-465...
CVE-2019-14404: Undefined Security Weakness
cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...
CVE-2019-14399: Undefined Security Weakness
The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...
CVE-2019-14394: Undefined Security Weakness
cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetchsslcertificatesforfqdns API SEC-489...
PT-2019-13663
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 80.0.5 Description The issue allows for unsafe file operations in the context of the root account. This is achieved via the "fetch ssl certificates for fqdns" API endpoint. Recommendations For versions prior to 80.0.5,...
Alpine Linux Docker Empty Password Account
The vulnerability of the Alpine Linux Docker distribution stems from the use of a empty password for the pre-installed root account. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Unpassworded (Blank Password) 'root' Account (Telnet)
The remote host has set no password for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unpassworded (Blank Password) 'root' Account (SSH)
The remote host has set no password for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-10661
On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...
Default credentials
On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...
CVE-2019-10661
On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...
CVE-2019-10661
On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...
CVE-2019-10661: Improper Authentication
On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...
Default Password ('!2345Asdfg') for 'root' Account
The account 'root' on the remote host has the password '!2345Asdfg'. An attacker may leverage this issue to gain access, likely as an administrator, to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "!2345Asdfg";...
CNC11 TITANIUM mini Full Access
The vulnerability of the embedded software of the CNC11 TITANIUM mini system is related to the use of a default weak password for the root account, information about which is not available in the documentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain ful...
PT-2019-1434
Name of the Vulnerable Software and Affected Versions CNC11 TITANIUM mini affected versions not specified Description The issue is related to the use of a weak default password for the root account in the CNC11 TITANIUM mini system's embedded software. This password information is not provided in...
TeNIX PLC Full Access
The vulnerability of the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 is related to the use of a default weak password for the root account, information about which is not available in the documentation. Exploiting this vulnerability could allow an attacker,...
CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery Cross-Site Scripting
CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery Cross-Site Scripting Title: CentOS Web Panel Root Account Takeover + Remote Command Execution var url = "http://targetserver:2030/admin/index.php?module=rootpwd"; var params = "ifpost=yes&password1=newpassword&password2=newpassword"; var vul...