Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:32 a.m.•24 views

CVE-2024-39033

In Newgensoft OmniDocs 11.0SP103006, Insecure Direct Object Reference IDOR in the getuserproperty function allows user's configuration and PII to be stolen...

7.5CVSS6.8AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/06 12:00 a.m.•10 views

CVE-2024-39033

In Newgensoft OmniDocs 11.0SP103006, Insecure Direct Object Reference IDOR in the getuserproperty function allows user's configuration and PII to be stolen...

6.8AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/16 12:00 a.m.•3 views

CVE-2023-47213: Use of Hard-coded Credentials

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. ...

9.8CVSS8.2AI score0.01091EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2020/06/04 3:49 p.m.•38 views

CVE-2020-9462

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...

4.7AI score0.00331EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/04/12 12:00 a.m.•8 views

Multiple Vulnerabilities in TVT DVR/NVR/IPC

Shenzhen Tongwei Digital Technology Co., Ltd TVT for short is an international first-class product and system solution provider in the field of video security integrating R&D, production, sales and service, providing video security products and solutions with core competitiveness for users in mor...

7.8AI score
SaveExploits0References1
CNVD
CNVD
•added 2017/02/25 12:00 a.m.•7 views

Authentication Bypass Vulnerability in D-Link DGS-1510 Switches

The D-Link DGS-1510 series is the next generation of intelligent managed switches. An authentication bypass vulnerability exists in the D-Link DGS-1510 Switches. The vulnerability is exploited to allow an attacker to execute commands on the switches and extract the configuration and obtain user...

7.4AI score
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2006/08/31 12:00 a.m.•19 views

JVN#99776858 Multiple vulnerabilities in Webmin and Usermin

Impact A remote attacker could conduct the followings: Steal Webmin and Usermin's configuration information Execute an arbitrary script on the user's web browser Possibly conduct a session hijack attack if session information from a cookie is leaked Solution Products Affected Webmin 1.290 and...

7.4AI score
SaveExploits0
Rows per page
Query Builder