5776 matches found
CVE-2020-15482
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network...
Default credentials
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network...
CVE-2020-15482
CVE-2020-15482 concerns Nescomed Multipara Monitor M1000 devices, where an unencrypted TELNET service is enabled by default with a blank admin password, enabling an attacker on the local network to gain root access. The available connected sources corroborate the issue across multiple references ...
CVE-2020-15482
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network...
MGASA-2020-0346 Updated kdepim-runtime and kmail-account-wizard packages fix security vulnerability
It was discovered that there was an issue where kmail would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use CVE-2020-15954...
CVE-2020-9062
Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting an...
Ransomware Hits Leading US Medical Debt Collector R1 RCM Inc.
By Waqas Previously, R1 RCM Inc., under different name had several incidents involving thefts of laptops containing unencrypted patient data. This is a post from HackRead.com Read the original post: Ransomware Hits Leading US Medical Debt Collector R1 RCM Inc...
UBUNTU-CVE-2020-17495
django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...
DIGITUS DA-70254 Elevation of Privilege Vulnerability
The Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub is a Gigabit network hub from Assmann Electronic, Germany. A security vulnerability exists in the Assmann Electronic DIGITUS DA-70254 4-Port Gigabit Network Hub version 2.073.000.E0008. An attacker can exploit this vulnerability b...
TP-Link TL-PS310U Elevation of Privilege Vulnerability
The TP-Link TL-PS310U is a single USB 2.0 port MFP and storage server. An elevation of privilege vulnerability exists in versions prior to TP-Link TL-PS310U 2.079.000.t0210, which stems from the ability to discover administrative passwords by sniffing unencrypted UDP traffic, and can be exploited...
Lindy 42633 Elevation of Privilege Vulnerability
The Lindy 42633 is a 4-port USB 2.0 Gigabit network server. An elevation of privilege vulnerability exists in the Lindy 42633 2.078.000. The vulnerability stems from the ability to discover the administrative password by sniffing unencrypted UDP traffic. An attacker on the same network could use...
CVE-2020-15062
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
CVE-2020-15058
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
CVE-2020-15054
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
CVE-2020-15054
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
CVE-2020-15058
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
CVE-2020-15058
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...
Debian: Security Advisory (DLA-2300-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2300-1] kdepim-runtime security update
Package : kdepim-runtime Version : 4:16.04.2-2+deb9u1 CVE ID : CVE-2020-15954 It was discovered that there was an issue where kdepim-runtime would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use. For Debian 9 "Stretch", this issue has been fixe...