Lucene search
+L

8423 matches found

ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.4 views

CVE-2023-39465

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to explo...

7.5CVSS7.1AI score0.00761EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/05/03 3:15 a.m.9 views

CVE-2023-39465

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to explo...

7.5CVSS5.8AI score0.00761EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.6 views

CVE-2023-39458

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit th...

5.3CVSS6.1AI score0.00241EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/05/03 3:15 a.m.46 views

CVE-2023-39458

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit th...

5.3CVSS5.4AI score0.00241EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 3:15 a.m.11 views

CVE-2023-39458

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit th...

5.3CVSS5.9AI score0.00241EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 2:15 a.m.5 views

CVE-2023-34284

NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

6.3CVSS5.8AI score0.00447EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.5 views

CVE-2023-32169

D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS5.9AI score0.56064EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/03 2:15 a.m.9 views

CVE-2023-32169

D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS5.9AI score0.56064EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:15 a.m.64 views

CVE-2023-51588

CVE-2023-51588 involves Voltronic Power ViewPower Pro with a MySQL configuration flaw caused by hard-coded credentials. The vulnerability enables local privilege escalation, allowing an attacker who can run low-privileged code to escalate to SYSTEM and execute arbitrary code within that context. ...

7.8CVSS7.8AI score0.00234EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/03 2:15 a.m.14 views

CVE-2023-51588 Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to execute...

7.8CVSS7.2AI score0.00234EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/03 2:15 a.m.22 views

CVE-2023-51588 Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to execute...

7.8CVSS8AI score0.00234EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/03 2:13 a.m.67 views

CVE-2023-44411

CVE-2023-44411 covers a vulnerability in D-Link D-View where the flaw resides in the InstallApplication class, which contains a hard-coded password for the remotely reachable database. This allows a remote attacker to bypass authentication on affected installations, effectively compromising acces...

9.8CVSS9.6AI score0.02351EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/03 2:13 a.m.32 views

CVE-2023-44411 D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability

D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exist...

9.8CVSS9.9AI score0.02351EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 2:13 a.m.17 views

CVE-2023-44411 D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability

D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exist...

9.8CVSS7.2AI score0.02351EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/03 1:59 a.m.70 views

CVE-2023-39465

CVE-2023-39465 is tied to Triangle MicroWorks SCADA Data Gateway . The issue is in the TmwCrypto class, due to the use of a hard-coded cryptographic key and a hard-coded certificate, enabling remote disclosure of sensitive information without authentication. The vulnerability is documented across...

7.5CVSS7.2AI score0.00761EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/03 1:59 a.m.19 views

CVE-2023-39465 Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to explo...

7.5CVSS6.2AI score0.00761EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 1:59 a.m.62 views

CVE-2023-39465 Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to explo...

7.5CVSS7.5AI score0.00761EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 1:57 a.m.57 views

CVE-2023-34284

CVE-2023-34284 affects NETGEAR RAX30 routers. The vulnerability is caused by a hard-coded user account in the system configuration that can be used to access the CLI service as a low-privileged user, allowing network-adjacent attackers to bypass authentication without any user interaction. The is...

6.3CVSS6.5AI score0.00447EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/03 1:57 a.m.34 views

CVE-2023-34284 NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability

NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

6.3CVSS6.7AI score0.00447EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 1:57 a.m.16 views

CVE-2023-34284 NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability

NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

6.3CVSS6.8AI score0.00447EPSS
SaveExploits0References2
Rows per page
Query Builder