2946 matches found
CVE-2023-40539
The CVE entry CVE-2023-40539 is associated with Philips Vue PACS and is documented in connected sources as Weak Password Requirements (CWE-521). The Philips advisory lists this vulnerability among others affecting Vue PACS versions prior to 12.2.8.400 and highlights that weak password controls co...
PT-2024-12895 · Philips · Philips Vue Pacs
Name of the Vulnerable Software and Affected Versions: Philips Vue PACS affected versions not specified Description: The issue is related to the lack of strong password requirements for users, which could facilitate the compromise of user accounts by attackers. Recommendations: At the moment, the...
Siemens RUGGEDCOM APE 1808
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Weak password vulnerability in cryptographic device management platform of Sanwei Xin'an Technology Co. Ltd (CNVD-2024-35767)
Ltd. is a cryptographic infrastructure provider, focusing on innovative breakthroughs in key cryptographic technologies and the research, development, sales and service of core products, providing comprehensive commercial cryptographic products and solutions for the field of network information...
The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software, related to weak password requirements, allows a intruder to gain unauthorized access to the router’s PIN code.
The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software is related to weak password requirements. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the router’s PIN code...
VulnCheck KEV: CVE-2024-21754
A use of password hash with insufficient computational effort vulnerability CWE-916 affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged...
Adobe ColdFusion 安全漏洞
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from a weak algorithmic vulnerability that stems from the presence of weak...
CVE-2024-21754
A use of password hash with insufficient computational effort vulnerability CWE-916 affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged...
CVE-2024-21754
A use of password hash with insufficient computational effort vulnerability CWE-916 affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged...
CVE-2024-21754
A use of password hash with insufficient computational effort vulnerability CWE-916 affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged...
CVE-2023-7264
The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, and including, 1.0.22. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by guessing an 4-digit numeric reset code...
CVE-2023-7264 Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism
The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, and including, 1.0.22. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by guessing an 4-digit numeric reset code...
CVE-2023-7264 Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism
The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, and including, 1.0.22. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by guessing an 4-digit numeric reset code...
CVE-2023-7264
The Build App Online plugin for WordPress (all versions up to 1.0.21) is vulnerable due to a weak password reset mechanism. An unauthenticated attacker can reset arbitrary user passwords by guessing a 4‑digit numeric reset code, enabling account takeover with high impact (C/H/I/A). The connected ...
PT-2024-4073 · NetGear · Netgear Wnr614
Name of the Vulnerable Software and Affected Versions: Netgear WNR614 version N300-V1.1.0.54 1.0.1 Description: The issue is related to weak password requirements in the Netgear WNR614 N300 Wi-Fi router, allowing attackers to create passwords that do not conform to defined security standards. Thi...
CVE-2024-5277 Weak Password Recovery Mechanism in lunary-ai/lunary
In lunary-ai/lunary version 1.2.4, a vulnerability exists in the password recovery mechanism where the reset password token is not invalidated after use. This allows an attacker who compromises the recovery token to repeatedly change the password of a victim's account. The issue lies in the...
CVE-2024-5277 Weak Password Recovery Mechanism in lunary-ai/lunary
In lunary-ai/lunary version 1.2.4, a vulnerability exists in the password recovery mechanism where the reset password token is not invalidated after use. This allows an attacker who compromises the recovery token to repeatedly change the password of a victim's account. The issue lies in the...