Lucene search
K

880 matches found

RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-40425

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS5.5AI score0.00036EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added yesterday2 views

CVE-2024-43384

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer...

8CVSS5.5AI score0.0003EPSS
Exploits0References1
OSV
OSV
added yesterday2 views

GHSA-FGMC-2HQJ-86V4 Vantage6: Set admin user and password from environment or configuration

Impact Vantage6 currently provides an initial user with username root and password root. This is not ideal for the following reasons: - Attackers know that almost all vantage6 servers have a user with username root that probably has admin rights - The initial password is very weak and it is...

6.9CVSS5.5AI score
Exploits0References3
Github Security Blog
Github Security Blog
added yesterday4 views

Vantage6: Set admin user and password from environment or configuration

Impact Vantage6 currently provides an initial user with username root and password root. This is not ideal for the following reasons: - Attackers know that almost all vantage6 servers have a user with username root that probably has admin rights - The initial password is very weak and it is...

5.5AI score
Exploits0References3Affected Software1
NVD
NVD
added 2 days ago6 views

CVE-2026-36182

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

0.00017EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2 days ago8 views

PT-2026-46241

T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account...

5.8AI score0.00018EPSS
Exploits1References5
Cvelist
Cvelist
added 2 days ago30 views

CVE-2026-36182

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

0.00017EPSS
Exploits0References3
EUVD
EUVD
added 2 days ago5 views

EUVD-2026-34309

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

5.8AI score0.00017EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2 days ago9 views

PT-2026-46255

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack...

5.8AI score0.00017EPSS
Exploits0References4
NVD
NVD
added 2026/05/29 7:16 p.m.6 views

CVE-2026-40425

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS0.00036EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/29 5:47 p.m.27 views

CVE-2026-40425 MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS0.00036EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/29 5:47 p.m.9 views

CVE-2026-40425

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS5.8AI score0.00036EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/05/29 5:47 p.m.8 views

CVE-2026-40425 MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS5.8AI score0.00036EPSS
Exploits0References3
CVE
CVE
added 2026/05/29 5:47 p.m.9 views

CVE-2026-40425

CVE-2026-40425 affects the Danelec MacGregor Voyage Data Recorder (VDR) web interface. The vulnerability allows the administrator account to directly edit sensitive authentication-related files, potentially changing the root password. This is supported by ICS-CERT/DHS metrics indicating impact to...

6.9CVSS5.8AI score0.00036EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/05/29 5:47 p.m.11 views

EUVD-2026-33403

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS5.8AI score0.00036EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/29 12:0 a.m.5 views

Danelec Marine Danelec MacGregor Voyage Data Recorder 安全漏洞

The Danelec Marine Danelec MacGregor Voyage Data Recorder is a series of ship navigation data recording systems developed by Danelec Marine. There is a security vulnerability associated with the Danelec Marine Danelec MacGregor Voyage Data Recorder. This vulnerability stems from the possibility f...

6.9CVSS5.8AI score0.00036EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.6 views

PT-2026-44925

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

6.9CVSS5.8AI score0.00036EPSS
Exploits0References4
NVD
NVD
added 2026/05/27 2:16 p.m.12 views

CVE-2026-36538

Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying...

7.3CVSS0.00047EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.5 views

Netis AC1200 安全漏洞

The Netis AC1200 is a series of dual-band wireless broadband routers produced by the Chinese company Netis. The Netis AC1200 Router NC21 V4.0.1.4296 version contains a security vulnerability. This vulnerability stems from the hardcoded root credentials stored in the /etc/shadow.sample file. The...

7.3CVSS5.8AI score0.00047EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/27 12:0 a.m.5 views

CVE-2026-36538

Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying...

5.8AI score0.00047EPSS
Exploits0References2
Rows per page
Query Builder