Lucene search
+L

4874 matches found

Positive Technologies
Positive Technologies
•added 2024/12/03 12:00 a.m.•20 views

PT-2024-9532 · Hitachi · Hitachi Ops Center Common Services +1

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Common Services versions 10.9.3-00 through 11.0.3-00 Hitachi Ops Center OVA versions 10.9.3-00 through 11.0.2-01 Description: The issue is related to the use of default credentials in Hitachi Ops Center Common Services, whi...

7.5CVSS7.8AI score0.00303EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/03 12:00 a.m.•5 views

CVE-2024-45068: Use of Default Credentials

Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA. This issue affects Hitachi Ops Center Common Services: from 10.9.3-00 before 11.0.3-00; Hitachi Ops Center OVA: from 10.9.3-00 before 11.0.2-01...

7.1CVSS5.8AI score0.00303EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/02 11:15 p.m.•28 views

CVE-2024-53937

An issue was discovered on Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitrary commands with root-level permissions...

8.8CVSS0.00457EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/02 12:00 a.m.•82 views

CVE-2024-53937

The Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933 , hardware 1.0 ) is vulnerable because the TELNET service is enabled by default with admin/admin credentials and is exposed over the LAN. This configuration allows an attacker to execute arbitrary commands with root-level permissions...

8.8CVSS8.2AI score0.00457EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/12/02 12:00 a.m.•16 views

CVE-2024-53937

An issue was discovered on Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitrary commands with root-level permissions...

9.2AI score0.00457EPSS
SaveExploits0References2
NVD
NVD
•added 2024/11/25 9:15 a.m.•34 views

CVE-2022-33862

IPP software prior to v1.71 is vulnerable to default credential vulnerability. This could lead attackers to identify and access vulnerable systems...

6.7CVSS0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/25 12:00 a.m.•24 views

PT-2024-11584 · Ipp · Ipp

Name of the Vulnerable Software and Affected Versions: IPP software versions prior to 1.71 Description: The issue is related to a default credential vulnerability. This could lead attackers to identify and access vulnerable systems. Recommendations: For versions prior to 1.71, update to version...

6.7CVSS7.1AI score0.00178EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/25 12:00 a.m.•2 views

CVE-2022-33862: Improper Authentication

IPP software prior to v1.71 is vulnerable to default credential vulnerability. This could lead attackers to identify and access vulnerable systems...

6.7CVSS5.8AI score0.00178EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/25 12:00 a.m.•16 views

Eaton IPP 安全漏洞

Eaton IPP is a power management software from Eaton Corporation USA. A security vulnerability exists in Eaton IPP versions prior to v1.71 that stems from the presence of a default credentials issue that could lead an attacker to identify and access vulnerable systems...

6.7CVSS6.6AI score0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•4 views

PT-2024-8659

Name of the Vulnerable Software and Affected Versions Versa Director versions prior to 22.1.4 Description The issue is related to the use of default credentials in the configuration with PostgreSQL, allowing an unauthenticated attacker to access and administer the database, read local filesystem...

10CVSS5.8AI score0.00584EPSS
SaveExploits0References15
NVD
NVD
•added 2024/11/18 10:15 p.m.•51 views

CVE-2024-51051

AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account...

9.8CVSS0.00465EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/18 12:00 a.m.•14 views

PT-2024-34502 · Avscms · Avscms

Name of the Vulnerable Software and Affected Versions: AVSCMS version 8.2.0 Description: The issue is related to weak default credentials for the Administrator account. Recommendations: For AVSCMS version 8.2.0, change the default credentials of the Administrator account to strong, unique...

9.8CVSS7.2AI score0.00465EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•6 views

CVE-2024-51051: Incorrect Default Permissions

AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account...

9.8CVSS5.8AI score0.00465EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•18 views

AVSCMS 安全漏洞

AVSCMS is a content management system from AVSCMS Open Source. A security vulnerability exists in AVSCMS version v8.2.0 that stems from weak default credentials that contain an administrator account...

9.8CVSS6.8AI score0.00465EPSS
SaveExploits0References2
Mend
Mend
•added 2024/11/18 12:00 a.m.•3 views

CVE-2024-51051

AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account...

9.8CVSS0.00465EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/11/18 12:00 a.m.•19 views

The vulnerability of the D-Link DSL6740C modem’s microprogramming software lies in its ability to bypass security measures. This allows attackers to read arbitrary system files, obtain the device’s MAC address, and attempt to gain access to the system.

The vulnerability of D-Link DSL6740C modem’s microprogramming software is related to the possibility of bypassing security measures. Exploiting this vulnerability allows a malicious actor to read arbitrary system files, obtain the device’s MAC address, and attempt to log into the system using...

7.8CVSS5.6AI score0.01274EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2024/11/15 5:55 a.m.•142 views

Exploit for CVE-2024-54761

BigAnt Office Messenger 5.6.06 RCE via SQL Injection SQL injec...

6.3CVSS8.2AI score0.01779EPSS
SaveExploits7
NVD
NVD
•added 2024/11/08 9:15 a.m.•32 views

CVE-2024-50588

An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enabl...

9.8CVSS0.00696EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/11/08 8:37 a.m.•35 views

CVE-2024-50588 Unprotected Exposed Firebird Database with default credentials

An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enabl...

0.00696EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/08 8:37 a.m.•77 views

CVE-2024-50588

The HASOMED Elefant exercise software (specifically the Elefant Firebird database ) is vulnerable to unauthorized access due to the use of known default credentials . Attackers with local network access can gain remote DBA access , allowing them to view sensitive information such as patient data ...

9.8CVSS9.5AI score0.00696EPSS
SaveExploits0References3
Rows per page
Query Builder