Lucene search
K

8143 matches found

Vulnrichment
Vulnrichment
added 2022/05/26 4:32 p.m.11 views

CVE-2021-33016 KUKA KR C4 - Use of Hard-Coded Credentials

An attacker can gain full access read/write/delete to sensitive folders due to hard-coded credentials on KUKA KR C4 control software for versions prior to 8.7 or any product running KSS...

9.8CVSS7AI score0.00187EPSS
Exploits0References1
CVE
CVE
added 2022/05/26 4:32 p.m.84 views

CVE-2021-33016

Summary of CVE-2021-33016 : The vulnerability affects KUKA KR C4 control software (and products running KSS) for versions prior to 8.7. It stems from hard-coded credentials that allow an attacker to gain full access (read/write/delete) to sensitive folders. Public documentation from NVD/Red Hat/N...

9.8CVSS9.7AI score0.00187EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/05/25 9:15 p.m.2 views

CVE-2022-31620

In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan...

6.5CVSS5.3AI score0.00238EPSS
Exploits1References3
OSV
OSV
added 2022/05/25 9:15 p.m.2 views

DEBIAN-CVE-2022-31620

In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan...

6.5CVSS6.3AI score0.00238EPSS
Exploits1References1
OSV
OSV
added 2022/05/25 9:15 p.m.7 views

CVE-2022-31620

In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan...

6.5CVSS6.7AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2022/05/25 9:15 p.m.32 views

CVE-2022-31620

In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan...

6.5CVSS6.6AI score0.00238EPSS
Exploits1References3
OSV
OSV
added 2022/05/25 9:15 p.m.0 views

UBUNTU-CVE-2022-31620

In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan...

6.5CVSS6.6AI score0.00238EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2022/05/25 8:6 p.m.37 views

CVE-2022-31620

In libjpeg before 1.64, BitStream::Get in bitstream.hpp has an assertion failure that may cause denial of service. This is related to out-of-bounds array access during arithmetically coded lossless scan or arithmetically coded sequential scan...

6.5CVSS6.4AI score0.00238EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2022/05/25 12:0 a.m.4 views

PT-2022-20875 · Libjpeg +1 · Libjpeg +1

Name of the Vulnerable Software and Affected Versions: libjpeg versions prior to 1.64 Description: The issue is related to an assertion failure in BitStream::Get in bitstream.hpp, which may cause denial of service. This occurs due to out-of-bounds array access during specific scan modes, includin...

6.5CVSS6.2AI score0.00238EPSS
Exploits1References11
NVD
NVD
added 2022/05/24 4:15 p.m.5 views

CVE-2013-10002

A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials...

9.1CVSS0.00216EPSS
Exploits0References2
CVE
CVE
added 2022/05/24 3:30 p.m.43 views

CVE-2013-10002

The CVE affects Telecommunication Software SAMwin Contact Center Suite 5.1. The root cause is the getCurrentDBVersion function in the credential handler library SAMwinLIBVB.dll, which relies on hard-coded credentials for authentication. This leads to potential credential exposure and unauthorized...

9.1CVSS7.8AI score0.00216EPSS
Exploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2022/05/24 3:30 p.m.3 views

CVE-2013-10002 Telecommunication Software SAMwin Contact Center Suite Credential SAMwinLIBVB.dll getCurrentDBVersion hard-coded credentials

A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials...

6.5CVSS9.3AI score0.00216EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/05/24 3:30 p.m.8 views

CVE-2013-10002 Telecommunication Software SAMwin Contact Center Suite Credential SAMwinLIBVB.dll getCurrentDBVersion hard-coded credentials

A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials...

6.5CVSS9.2AI score0.00216EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/05/24 12:0 a.m.2 views

Telecommunication Software SAMwin Contact Center Suite 信任管理问题漏洞

Telecommunication Software SAMwin Contact Center Suite is a highly versatile and flexible contact center software solution from Telecommunication Software. A security vulnerability exists in Telecommunication Software SAMwin Contact Center Suite version 5.1, which stems from a function...

9.1CVSS8.2AI score0.00216EPSS
Exploits0References3
CNVD
CNVD
added 2022/05/23 12:0 a.m.24 views

InHand Networks InRouter302硬编码凭证漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. InHand Networks InRouter302 version 3.5.37 contains a hard-coded credential vulnerability that could be exploited by an attacker to send specially crafted network requests that could lead to the execution of...

8.8CVSS6.3AI score0.00374EPSS
Exploits1References1
CNVD
CNVD
added 2022/05/23 12:0 a.m.18 views

Rakuten Mobile Rakuten Casa Trust Management Issue Vulnerability

Rakuten Mobile Rakuten Casa is a small base station from Rakuten Mobile Japan, Inc. A trust management issue vulnerability exists in Rakuten Mobile Rakuten Casa APFV200 and APFV141 versions, which stems from the presence of hard-coded credentials in the application code. An unauthenticated, remot...

5CVSS3.1AI score0.0067EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2022/05/20 8:20 p.m.4 views

CVE-2022-29186 Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and rundeck-enterprise docker images contained a pre-generated SSH keypair. If the idrsa.pub public key of the keypair was copied to authorizedkeys files on remote host, those hosts...

9.1CVSS7.3AI score0.0031EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/05/20 8:20 p.m.14 views

CVE-2022-29186 Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and rundeck-enterprise docker images contained a pre-generated SSH keypair. If the idrsa.pub public key of the keypair was copied to authorizedkeys files on remote host, those hosts...

9.1CVSS9.8AI score0.0031EPSS
Exploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/05/19 6:13 a.m.3 views

Multiple vulnerabilities in Rakuten Casa

Overview Rakuten Casa provided by Rakuten Mobile, Inc. contains multiple vulnerabilities listed below. Use of Hard-coded Credentials CWE-798 - CVE-2022-29525 Improper Access Control CWE-284 - CVE-2022-28704 Improper Access Control CWE-284 - CVE-2022-26834 CVE-2022-29525 Narumi Hirai of LAC Co.,...

9.8CVSS7.1AI score0.08563EPSS
Exploits0References10
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/05/19 12:0 a.m.39 views

JVN#46892984: Multiple vulnerabilities in Rakuten Casa

Rakuten Casa provided by Rakuten Mobile, Inc. contains multiple vulnerabilities listed below. Use of Hard-coded Credentials CWE-798 - CVE-2022-29525 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N| Base Score: 5.9 CVSS v2| AV:N/AC:M/Au:N/C:C/I:N/A:N| Base...

9.8CVSS8AI score0.08563EPSS
Exploits0
Rows per page
Query Builder