Lucene search
+L

11645 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/01 12:00 a.m.•3 views

CVE-2024-32210: Use of Hard-coded Password

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

5.3CVSS5.8AI score0.00437EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/01 12:00 a.m.•6 views

CVE-2024-32213: Weak Password Requirements

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

5.3CVSS5.7AI score0.0087EPSS
SaveExploits4References1
Cvelist
Cvelist
•added 2024/05/01 12:00 a.m.•62 views

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

6.9AI score0.0087EPSS
SaveExploits4References1
CNNVD
CNNVD
•added 2024/05/01 12:00 a.m.•23 views

SonicWALL GMS security vulnerabilities

SonicWALL GMS is a global management system from SonicWALL, Inc. a powerful and intuitive solution for organizations, distributed enterprises, and service providers to centrally manage and rapidly deploy SonicWall Firewall, Anti-Spam, Backup and Recovery, and Secure Remote Access solutions. A...

7.5CVSS7.7AI score0.00885EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/01 12:00 a.m.•19 views

CVE-2024-32210

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

7.9AI score0.0087EPSS
SaveExploits4References1
CNNVD
CNNVD
•added 2024/05/01 12:00 a.m.•24 views

LoMag WareHouse Management security vulnerability

LoMag WareHouse Management is a warehouse management software from LoMag. A security vulnerability exists in LoMag WareHouse Management version 1.0.20.120 and prior versions, which stems from a 10-character hard-coded password that is allowed by default...

8.1CVSS6.9AI score0.0087EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2024/05/01 12:00 a.m.•11 views

PT-2024-24461

Name of the Vulnerable Software and Affected Versions LoMag WareHouse Management application versions 1.0.20.120 and older Description The issue concerns the use of hard-coded passwords by default for forms and SQL connections. Recommendations For versions 1.0.20.120 and older, update the...

5.5CVSS7.4AI score0.00437EPSS
SaveExploits4References9
CNNVD
CNNVD
•added 2024/05/01 12:00 a.m.•23 views

LoMag WareHouse Management security vulnerability

LoMag WareHouse Management is a warehouse management software from LoMag. A security vulnerability exists in LoMag WareHouse Management versions 1.0.20.120 and earlier, which stems from the use of hard-coded passwords for forms and SQL connections by default...

8.1CVSS7.3AI score0.0087EPSS
SaveExploits4References2
SonicWall
SonicWall
•added 2024/04/30 7:20 p.m.•107 views

GMS ECM multiple vulnerabilities

SonicWall GMS Virtual Appliance, Windows - 9.3.4 and earlier versions are vulnerable to the following security issues.1 CVE-2024-29010 - GMS ECM Policy XML External Entity Processing Information Disclosure Vulnerability.The XML document processed in the GMS ECM endpoint is vulnerable to XML...

7.5CVSS7.5AI score0.00885EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/30 12:00 a.m.•8 views

CVE-2019-19752: Use of Hard-coded Cryptographic Key

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build...

9.8CVSS5.8AI score0.00512EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/30 12:00 a.m.•7 views

CVE-2019-19754: Use of Hard-coded Cryptographic Key

HiveOS through 0.6-102@191212 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-09-26, the vendor indicated that they would consider fixing this...

5.7CVSS5.8AI score0.00233EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/30 12:00 a.m.•8 views

CVE-2019-19753: Use of Hard-coded Cryptographic Key

SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: the vendor indicated that they have no plans to fix this, and discourage deployment using...

9.1CVSS5.8AI score0.00429EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/30 12:00 a.m.•21 views

PT-2024-22670 · Sonicwall · Sonicwall Gms

Name of the Vulnerable Software and Affected Versions: SonicWALL GMS versions 9.3.4 and earlier Description: The issue is related to the use of a hard-coded password in the GMS ECM endpoint, leading to an authentication bypass. This allows remote attackers to bypass authentication on affected...

7.5CVSS7.4AI score0.00885EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•4 views

CVE-2023-52723: Use of Hard-coded Credentials

In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...

7.1CVSS5.8AI score0.00547EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2024/04/27 4:55 p.m.•75 views

Url-Status-Checker - Tool For Swiftly Checking The Status Of URLs

Status Checker is a Python script that checks the status of one or multiple URLs/domains and categorizes them based on their HTTP status codes. Version 1.0.0 Created BY BLACK-SCORP10 t.me/BLACK-SCORP10 Features Check the status of single or multiple URLs/domains. Asynchronous HTTP requests for...

7.2AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/04/26 12:00 a.m.•44 views

Fortinet FortiClient Hardcoded credentials in vcm2.exe (FG-IR-23-108)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-108 advisory. - A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an...

5.5CVSS6.2AI score0.00205EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/22 12:00 a.m.•14 views

CVE-2024-22813: Use of Hard-coded Credentials

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller...

4.4CVSS5.8AI score0.00385EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/22 12:00 a.m.•23 views

Tormach PathPilot Controller security vulnerabilities

Tormach PathPilot Controller is a series of controllers from Tormach USA. A security vulnerability exists in Tormach PathPilot Controller version v2.9.6. An attacker exploiting this vulnerability could overwrite a hard-coded IP address in the device's memory, thereby disrupting the network...

4.4CVSS6.7AI score0.00385EPSS
SaveExploits0References2
NVD
NVD
•added 2024/04/19 5:15 a.m.•35 views

CVE-2024-29966

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance...

9.8CVSS7.6AI score0.0065EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/04/19 5:15 a.m.•20 views

CVE-2024-29966

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance...

9.8CVSS5.8AI score0.0065EPSS
SaveExploits0References1
Rows per page
Query Builder