CVE-2022-30624

Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password...

CVE-2022-30624

CVE-2022-30624 affects Chcnav P5E GNSS. Browsing the admin.html page allows resetting the admin password, and the capability is also present in the JavaScript code for the password. This vulnerability is documented across multiple sources (NVD, CVE List, CNNVD, PRION/PRIO pages, ENISA EUVD) indic...

Chcnav P5E GNSS 授权问题漏洞

Chcnav P5E GNSS is a Global Positioning System from Chcnav Corporation. A security vulnerability exists in the Chcnav P5E GNSS, which can be exploited by an attacker to reset the "admin" password by browsing to the "admin.html" page...

CVE-2022-30624

Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password...

CVE-2022-33737

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password...

CVE-2022-33737

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password...

CVE-2022-33737

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password...

CVE-2022-33737

Summary: CVE-2022-33737 affects OpenVPN Access Server installers. The issue arises because the installer creates a log file that is readable by everyone, and in OpenVPN Access Server versions 2.10.0 through 2.10.x (up to but not including 2.11.0) this log may contain a randomly generated administ...

PT-2022-21853 · Openvpn · Openvpn Access Server

Name of the Vulnerable Software and Affected Versions: OpenVPN Access Server versions 2.10.0 through 2.10.x and versions prior to 2.11.0, can be simplified to: OpenVPN Access Server versions 2.10.0 through 2.11.0, but since 2.11.0 is not included, it is more accurate to say: OpenVPN Access Server...

CVE-2022-27511

Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted...

Debian DLA-3049-1 : mailman - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3049 advisory. - In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS. CVE-2021-43331 - In GNU Mailman...

CVE-2022-29729

Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131 utilizes a weak default admin password generation algorithm which generates passwords that are accessible to unauthenticated attackers via the webUI login page...

CVE-2022-29729

CVE-2022-29729 affects Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131. Public sources describe a weak default admin password generation algorithm that creates passwords accessible from the webUI login page. ZSL-2022-5701 specifies the default password as a function of the device MAC (last...

CVE-2022-30495

In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin passwordvertical privilege escalation...

CVE-2022-30495

In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin passwordvertical privilege escalation...

Improper access control

In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin passwordvertical privilege escalation...

PT-2022-19422 · Nextcloud +1 · Nextcloud Server +1

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 22.2.6 Nextcloud Server versions prior to 23.0.3 Description: The issue allows a user to create a link that is not password protected, even if the administrator requires links to be password protected. There...

CVE-2021-42850

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access...

Verizon 4G LTE Network Extender 0.4.038.2131 Weak Credential Algorithm

Verizon 4G LTE Network Extender Weak Credentials Algorithm Vendor: Verizon Communications Inc. Product web page: https://www.verizon.com Affected version: GA4.38 - V0.4.038.2131 Summary: An LTE Network Extender enhances your indoor and 4G LTE data and voice coverage to provide better service for...

Verizon 4G LTE Network Extender Weak Credentials Algorithm

Summary An LTE Network Extender enhances your indoor and 4G LTE data and voice coverage to provide better service for your 4G LTE mobile devices. It's an extension of our 4G LTE network that's placed directly in your home or office. The LTE Network Extender works with all Verizon-sold 4G LTE mobi...