152 matches found
CVE-2022-3372
There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel,...
Siemens SCALANCE M875 Insufficiently Protected Credentials (CVE-2018-11449)
A vulnerability has been identified in SCALANCE M875 All versions. An attacker with access to the local file system might obtain passwords for administrative users. Successful exploitation requires read access to files on the local file system. A successful attack could allow an attacker to obtai...
PT-2022-26715 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 6.1.9 Description: A Cross-Site Request Forgery CSRF issue was discovered, allowing attackers to add Administrator accounts arbitrarily and modify Admin passwords. Recommendations: For DedeCMS version 6.1.9, at the moment, the...
CVE-2022-43031
DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords...
CVE-2022-43031
DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords...
CVE-2022-41776
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allow an attacker to provide new values for user configuration files such as UserListInfo.xml. This could lead to the changing of administrativ...
CVE-2022-41629
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an attacker to retrieve any file from the “RunningConfigs” directory. The attacker could then view and modify configuration files such as...
PT-2022-25993 · Delta Electronics · Infrasuite Device Master
Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior Description: The issue allows unauthenticated users to access the "aprunning" endpoint, potentially enabling an attacker to retrieve any file from the “RunningConfigs”...
Delta Electronics InfraSuite Device Master 访问控制错误漏洞
Delta Electronics InfraSuite Device Master is a device used to simplify and automate the monitoring of critical equipment from Delta Electronics Taiwan, China. An access control error vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.01a and prior versions, which stems from...
Information Disclosure
sosreport is vulnerable to information disclosure. A local unauthenticated attacker is able to gain access to RHV admin passwords due to the flawed business logic in postproc function in ovirt.py...
DataEase 安全漏洞
DataEase is an open source data visualization and analysis tool. An access control error vulnerability exists in DataEase, which stems from the fact that the product allows authorized users to access all user information and change administrator passwords. No details of the vulnerability are...
VulnCheck KEV: CVE-2014-0780
InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution...
KNIME has unspecified vulnerabilities
A security vulnerability exists in Knime, the Swiss company's enterprise software for putting data science workflows into production, which stems from the fact that when an administrator password is saved in a file without file access controls, its contents can be read by all local users. No...
Motorola CX2 日志信息泄露漏洞
The Motorola CX2 is a wireless router from Motorola USA. A security vulnerability exists in the Motorola CX2 router that stems from a product configuration or code implementation issue, which could lead to the discovery of admin passwords and private keys in logtar packages. The following product...
Security Bulletin: The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale (CVE-2015-7456)
Summary There is a vulnerability in IBM Spectrum Scale packaged with IBM Spectrum Scale RAID for the Elastic Storage Server and the GPFS Storage Server. Vulnerability Details CVEID: CVE-2015-7456 DESCRIPTION: IBM Spectrum Scale could allow a local unprivileged user, or a user with network access ...
D-link DSL-2888A 安全漏洞
The D-link DSL-2888A is a Unified Services Router from China AUO D-link. An information disclosure vulnerability exists in D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55, which originates from the disclosure of sensitive information in the response body, such as hashed admin...
PHPGurukul Hospital Management System Information Disclosure Vulnerability
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A security vulnerability exists in PHPGURUKUL Hospital Management System V 4.0, which can be exploited by an attacker to gain access to all user, doctor, and patient data, change administrator passwords,...
Locking down your cyber life in lockdown
Today the NCSC refreshed their advice for online shoppers, so I thought it’d be handy to review and advise on other aspects of consumer security hygiene. More than ever, we’re reliant on technology, so now that we’re in various stages of lockdown it’s a great time to have a look at your home and...
CVE-2020-6369
SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an unauthenticated attackers to bypass the authentication if the default passwords for Admin and Guest have not been changed by the administrator.This may impact the confidentiality of th...