CVE-2024-5404 ifm: moneo prone to weak password recovery mechanism

An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism...

CVE-2024-5404 ifm: moneo prone to weak password recovery mechanism

An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism...

CVE-2024-27107

Weak account password in GE HealthCare EchoPAC products...

CVE-2024-27107 Weak account password in GE HealthCare EchoPAC products

Weak account password in GE HealthCare EchoPAC products...

CVE-2024-27107 Weak account password in GE HealthCare EchoPAC products

Weak account password in GE HealthCare EchoPAC products...

CVE-2024-3263

YMS VIS Pro is an information system for veterinary and food administration, veterinarians and farm. Due to a combination of improper method for system credentials generation and weak password policy, passwords can be easily guessed and enumerated through brute force attacks. Successful attacks c...

CVE-2024-34340

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, Cacti calls compatpasswordhash when users set their password. compatpasswordhash use passwordhash if there is it, else use md5. When verifying password, it calls compatpasswordverify. In...

YMS VIS 安全漏洞

YMS VIS is an information system for veterinary and food management, veterinarians and farms. A security vulnerability exists in YMS VIS Pro version 3.3.0.6, which stems from an improper method of generating system credentials and a weak password policy, where passwords can be easily guessed and...

CVE-2024-3263

CVE-2024-3263 affects YMS VIS Pro due to improper system-credentials generation and weak password policy, enabling brute-force login attempts. Public details identify affected versions as VIS Pro 3.3.0.7). There is no explicit exploitation details or public in-the-wild exploit information provide...

PT-2024-24730 · Unknown · Yms Vis Pro

Name of the Vulnerable Software and Affected Versions: YMS VIS Pro versions prior to 3.3.0.7 Description: The issue arises from a combination of an improper method for system credentials generation and a weak password policy, allowing passwords to be easily guessed and enumerated through brute...

PT-2024-19490 · Digisol · Digisol Router

Name of the Vulnerable Software and Affected Versions: Digisol Router DG-GR1321 version v3.2.02 Description: This issue is caused by the improper implementation of password policies. An attacker with physical access could exploit this by creating passwords that do not adhere to the defined securi...

Unspecified vulnerability in Tenda N300F3 (CNVD-2025-16317)

The Tenda N300F3 is Tenda's wireless router designed for small office and home office environments. A security vulnerability exists in the Tenda N300F3 that originates from allowing a user to bypass the intended security policy and create weak passwords. No detailed vulnerability details are...

Broadcom Brocade SANnav 加密问题漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav version v2.2.2, which stems from the fact that when Brocade SANnav is upgraded from v2.2.2 to 2.3.0, a TLS/SSL weak message authentication code password is added to...

Weak Password Vulnerability in RG-ISG of Ruijie Networks Co.

Ruijie Networks Corporation is an industry-leading provider of network infrastructure and solutions. A weak password vulnerability exists in the RG-ISG of Ruijie Networks Corporation, which can be exploited by attackers to obtain sensitive information...

CVE-2024-3735

A vulnerability was found in Smart Office up to 20240405. It has been classified as problematic. Affected is an unknown function of the file Main.aspx. The manipulation of the argument New Password/Confirm Password with the input 1 leads to weak password requirements. It is possible to launch the...

CVE-2024-3735 Smart Office Main.aspx weak password

A vulnerability was found in Smart Office up to 20240405. It has been classified as problematic. Affected is an unknown function of the file Main.aspx. The manipulation of the argument New Password/Confirm Password with the input 1 leads to weak password requirements. It is possible to launch the...

CVE-2024-3735 Smart Office Main.aspx weak password

A vulnerability was found in Smart Office up to 20240405. It has been classified as problematic. Affected is an unknown function of the file Main.aspx. The manipulation of the argument New Password/Confirm Password with the input 1 leads to weak password requirements. It is possible to launch the...

CVE-2024-3735

CVE-2024-3735 affects Smart Office (up to 20240405), targeting the Main.aspx file where manipulating the New Password/Confirm Password argument (input 1) results in weak password requirements. The vulnerability can be triggered remotely with high attack complexity; several sources indicate public...

PT-2024-27493 · Unknown · Smart Office

Name of the Vulnerable Software and Affected Versions: Smart Office versions up to 20240405 Description: A vulnerability was found in the file Main.aspx, where the manipulation of the New Password/Confirm Password argument with the input 1 leads to weak password requirements. The attack can be...

Weak password vulnerability in InVid Tech of Shenzhen Tongwei Digital Technology Co.

Shenzhen Tongwei Digital Technology Co., Ltd. is a research and development, production, sales and service in one of the video security field of international - streaming products and system solutions provider. Shenzhen Tongwei Digital Technology Co., Ltd InVid Tech There is a weak password...