Lucene search
+L

2927 matches found

NVD
NVD
added 2023/11/11 9:15 a.m.26 views

CVE-2023-5959

A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. Affected is an unknown function of the file /login.php. The manipulation of the argument txtnewpwd leads to weak password recovery. The exploit has been disclosed to the public a...

4.3CVSS0.00877EPSS
SaveExploits1References4
OSV
OSV
added 2023/11/11 9:15 a.m.14 views

CVE-2023-5959

A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. Affected is an unknown function of the file /login.php. The manipulation of the argument txtnewpwd leads to weak password recovery. The exploit has been disclosed to the public a...

4.3CVSS4.8AI score0.00877EPSS
SaveExploits1References4
CVE
CVE
added 2023/11/11 9:00 a.m.106 views

CVE-2023-5959

Summary: CVE-2023-5959 affects Byzoro Smart S85F Management Platform v31R02B10-01. The vulnerability is in an unknown function of /login.php where manipulating the txt_newpwd parameter leads to weak password recovery. Public disclosure is noted. The issue is described as a technical weakness rath...

4.3CVSS4.7AI score0.00877EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2023/11/11 9:00 a.m.42 views

CVE-2023-5959 Byzoro Smart S85F Management Platform login.php password recovery

A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. Affected is an unknown function of the file /login.php. The manipulation of the argument txtnewpwd leads to weak password recovery. The exploit has been disclosed to the public a...

4.3CVSS5.1AI score0.00877EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/11/11 12:00 a.m.12 views

PT-2023-32444 · Byzoro · Byzoro Smart S85F Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S85F Management Platform version V31R02B10-01 Description: A problematic issue was found in the Byzoro Smart S85F Management Platform, affecting an unknown function of the file /login.php. The manipulation of the txt newpwd...

4.3CVSS7.3AI score0.00877EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2023/11/08 9:15 p.m.5 views

CVE-2023-29974

An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...

9.8CVSS7.2AI score0.01753EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/08 9:15 p.m.7 views

CVE-2023-29974

An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...

9.8CVSS5.8AI score0.01753EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/08 9:15 p.m.25 views

CVE-2023-29974

An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...

9.8CVSS0.01753EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/08 9:15 p.m.21 views

Design/Logic Flaw

An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements...

7.5CVSS7.4AI score0.01753EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/08 12:00 a.m.9 views

PT-2023-22499 · Unknown · Pfsense Ce

Name of the Vulnerable Software and Affected Versions: Pfsense CE version 2.6.0 Description: An issue in Pfsense CE allows attackers to compromise user accounts due to weak password requirements. Recommendations: For Pfsense CE version 2.6.0, consider strengthening password requirements to preven...

9.8CVSS7.4AI score0.01753EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/08 12:00 a.m.6 views

Netgate pfSense CE Security Vulnerability

Netgate pfSense CE is a free and open source FreeBSD-based firewall and router software. A security vulnerability exists in Netgate pfSense CE version 2.6.0, which originated from a vulnerability that allows an attacker to compromise a user account via a weak password request...

9.8CVSS6.9AI score0.01753EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:00 a.m.23 views

Rocky Linux 9 : libreoffice (RLSA-2023:0304)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0304 advisory. - An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only...

8.8CVSS7.8AI score0.05533EPSS
SaveExploits0References9
NVD
NVD
added 2023/11/03 6:15 a.m.28 views

CVE-2023-41353

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrup...

8.8CVSS8.8AI score0.00548EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/03 6:15 a.m.8 views

CVE-2023-41353

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrup...

8.8CVSS5.9AI score0.00548EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/03 6:15 a.m.21 views

Design/Logic Flaw

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrup...

6.5CVSS8.7AI score0.00548EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/03 5:48 a.m.35 views

CVE-2023-41353 Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrup...

8.8CVSS8.9AI score0.00548EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/03 5:48 a.m.97 views

CVE-2023-41353

CVE-2023-41353 affects Chunghwa Telecom Nokia G-040W-Q. The vulnerability is due to weak password requirements in the device, enabling a remote attacker with regular user privileges to infer the administrator password from system information after logging in, leading to admin access and arbitrary...

8.8CVSS8.8AI score0.00548EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/03 5:48 a.m.16 views

CVE-2023-41353 Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrup...

8.8CVSS7.2AI score0.00548EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/02 12:00 a.m.22 views

PT-2023-27921 · Nokia · Chunghwa Telecom Nokia G-040W-Q

Name of the Vulnerable Software and Affected Versions: Chunghwa Telecom NOKIA G-040W-Q affected versions not specified Description: The issue is related to weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information...

8.8CVSS8.8AI score0.00548EPSS
SaveExploits0References4
NVD
NVD
added 2023/10/29 1:15 a.m.28 views

CVE-2023-5840

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9...

8.8CVSS7.1AI score0.00674EPSS
SaveExploits1References2
Rows per page
Query Builder