CVE-2020-5148

SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privileged user and potentially forces the SSO Agent to authenticate allowing an attacker to bypass firewal...

CVE-2020-5148

SonicWall SSO-agent vulnerability CVE-2020-5148 occurs when NetAPI is used as the client probing method. NetAPI probing can allow an attacker to capture the privileged user’s password hash via NetWkstaUserEnum and may force the SSO-Agent to authenticate, potentially bypassing firewall access cont...

Intel SSD Toolbox Default Configuration Issue Vulnerability

A Default Configuration Issue vulnerability exists in Intel SSD Toolbox that arises from the use of insecure default configurations on networked systems or products...

FiberHome HG6245D devices 默认配置问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. A security vulnerability exists in wificustom.cfg in the FiberHome HG6245D. No details of the vulnerability are provided at this time...

FiberHome HG6245D devices 默认配置问题漏洞

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A default configuration issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to gain access to the internal management interface...

CVE-2020-14312

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

UBUNTU-CVE-2020-14312

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

Default configuration

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

CVE-2020-14312

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

CVE-2020-14312

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

Default configuration

An issue was discovered in Epikur before 20.1.1. A Glassfish 4.1 server with a default configuration is running on TCP port 4848. No password is required to access it with the administrator account...

CVE-2020-10537

An issue was discovered in Epikur before 20.1.1. A Glassfish 4.1 server with a default configuration is running on TCP port 4848. No password is required to access it with the administrator account...

Epikur 访问控制错误漏洞

Epikur is a healthcare mobile application from German company Epikur that provides users with psychotherapy, patient management and other features. An authorization issue vulnerability exists in Epikur versions prior to 20.1.1 that stems from an administrator account accessing the default...

JetBrains Ktor framework 加密问题漏洞

JetBrains Ktor is a web application framework from the Czech company JetBrains. A default configuration issue vulnerability exists in versions of JetBrains Ktor prior to 1.4.2, which stems from the fact that the weak password suite is enabled by default. No details of the vulnerability are provid...

keycloak: Default Client configuration is vulnerable to SSRF using "request_uri" parameter

A flaw was found in Keycloak, where it is possible to force the server to call out an unverified URL using the OIDC parameter requesturi. This flaw allows an attacker to use this parameter to execute a Server-side request forgery SSRF attack...

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)

Update Feb 3, 2021: It has been reported that macOS, AIX, and Solaris are also vulnerable to CVE-2021-3156, and that others may also still be vulnerable. Qualys has not independently verified the exploit. Original Post: The Qualys Research Team has discovered a heap overflow vulnerability in sudo...

MISP Default Configuration Error Vulnerability

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A default configuration error vulnerability exists in MISP version 2.4.136, which stems fr...

MISP 授权问题漏洞

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A default configuration error vulnerability exists in MISP version 2.4.136, which stems fr...

Default configuration

The default configuration of Crimson 3.1 Build versions prior to 3119.001 allows a user to be able to read and modify the database without authentication...

Crimson Critical Function Missing Authentication Vulnerability

Crimson is a programming software from Red Lion. Crimson suffers from a lack of authentication vulnerability in critical functions. An attacker could exploit this vulnerability to read and modify databases without authentication in the default configuration...