Lucene search
+L

11887 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/28 12:00 a.m.•10 views

CVE-2013-1603: Use of Hard-coded Credentials

An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05TESCO, TESCO DCS-2102 1.05TESCO, DCS-7510 1.00, DCS-7410 1.00, DCS-6410 1.00, DCS-5635 1.01, DCS-5605 1.01, DCS-5230L 1.02, DCS-5230 1.02, DCS-3430 1.02, DCS-3411 1.02, DCS-3410 1.02, DCS-2121 1.06FR, DCS-2121 1.06...

5.3CVSS6.8AI score0.16129EPSS
SaveExploits6References2
osv_cve
osv_cve
•added 2020/01/24 5:15 p.m.•24 views

CVE-2020-6963

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilized hard coded SMB credentials, which may allow an attacker to remotely execut...

10CVSS6AI score0.02746EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/01/24 5:15 p.m.•16 views

CVE-2020-6963

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilized hard coded SMB credentials, which may allow an attacker to remotely execut...

10CVSS8.9AI score0.02746EPSS
SaveExploits0References2
CVE
CVE
•added 2020/01/24 4:31 p.m.•103 views

CVE-2020-6963

GE Healthcare GECARE/CSCS/CIC/ApexPro Telemetry Server and related components (ApexPro Telemetry Server 4.2 and prior; CARESCAPE Telemetry Server 4.2 and prior; CIC 4.X/5.X; CSCS 1.X, 2.X; B450/B650/B850 monitors) are affected by CVE-2020-6963 alongside a family of vulnerabilities (CVE-2020-6961/...

10CVSS9.4AI score0.02746EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/01/24 4:31 p.m.•48 views

CVE-2020-6963

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilized hard coded SMB credentials, which may allow an attacker to remotely execut...

9.6AI score0.02746EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/01/24 12:00 a.m.•7 views

PT-2020-19311

Name of the Vulnerable Software and Affected Versions ApexPro Telemetry Server versions 4.2 and prior CARESCAPE Telemetry Server versions 4.2 and prior Clinical Information Center CIC versions 4.X and 5.X CARESCAPE Central Station CSCS versions 1.X Description The affected products use hard-coded...

10CVSS0.02746EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/24 12:00 a.m.•12 views

CVE-2020-6963: Use of Hard-coded Credentials

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilized hard coded SMB credentials, which may allow an attacker to remotely execut...

10CVSS8.6AI score0.02746EPSS
SaveExploits0References4
NVD
NVD
•added 2020/01/23 5:15 p.m.•40 views

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

9.8CVSS9.5AI score0.0115EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/01/23 5:15 p.m.•22 views

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

9.8CVSS7.3AI score0.0115EPSS
SaveExploits0References1
CVE
CVE
•added 2020/01/23 4:39 p.m.•101 views

CVE-2019-16153

Fortinet FortiSIEM is affected by CVE-2019-16153 due to a hard-coded credential vulnerability in the FortiSIEM database component (versions 5.2.5 and below). An attacker could gain unauthorized access to the device database via static credentials. Red Hat/Symantec and Fortinet advisories corrobor...

9.8CVSS9.4AI score0.0115EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/01/23 4:39 p.m.•54 views

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

9.5AI score0.0115EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2020/01/23 4:39 p.m.•21 views

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

7.3AI score0.0115EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/23 12:00 a.m.•8 views

CVE-2019-16153: Use of Hard-coded Credentials

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

9.8CVSS8.1AI score0.0115EPSS
SaveExploits0References2
NVD
NVD
•added 2020/01/21 5:15 p.m.•71 views

CVE-2020-6857

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary...

5.5CVSS5.5AI score0.00967EPSS
SaveExploits8References6
osv_cve
osv_cve
•added 2020/01/21 5:15 p.m.•22 views

CVE-2020-6857

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary...

5.5CVSS6.1AI score0.00967EPSS
SaveExploits8References6
attackerkb
attackerkb
•added 2020/01/21 5:15 p.m.•15 views

CVE-2020-6857

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary...

5.5CVSS5.6AI score0.00967EPSS
SaveExploits8References7
Positive Technologies
Positive Technologies
•added 2020/01/21 12:00 a.m.•9 views

PT-2020-19269

Name of the Vulnerable Software and Affected Versions CarbonFTP version 1.4 Description The issue concerns the use of insecure proprietary password encryption in CarbonFTP. Specifically, the software uses a hard-coded weak encryption key for local FTP server passwords, which is embedded directly ...

5.5CVSS0.00967EPSS
SaveExploits8References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/21 12:00 a.m.•9 views

CVE-2020-6857: Use of a Broken or Risky Cryptographic Algorithm

CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary...

5.5CVSS6AI score0.00967EPSS
SaveExploits8References3
zdt
zdt
•added 2020/01/21 12:00 a.m.•190 views

Neowise CarbonFTP 1.4 Insecure Proprietary Password Encryption Exploit

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/NEOWISE-CARBONFTP-v1.4-INSECURE-PROPRIETARY-PASSWORD-ENCRYPTION.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.neowise.com Product CarbonFTP v1.4 CarbonFTP is a...

5.5CVSS0.3AI score0.00967EPSS
SaveExploits8
NVD
NVD
•added 2020/01/15 5:15 p.m.•35 views

CVE-2019-9493

The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data from a target MyCar unit. This may allow the attacker to learn the location of a target, or gain...

10CVSS7AI score0.03573EPSS
SaveExploits0References5
Rows per page
Query Builder