Lucene search
+L

4874 matches found

Cvelist
Cvelist
•added 2024/07/18 4:33 p.m.•51 views

CVE-2023-40704 Philips Vue PACS Use of Default Credentials

The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity...

6.8CVSS0.00338EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/07/18 4:33 p.m.•36 views

CVE-2023-40704 Philips Vue PACS Use of Default Credentials

The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity...

6.8CVSS8.2AI score0.00338EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/18 12:00 a.m.•8 views

CVE-2023-40704: Use of Default Credentials

The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity...

9.8CVSS5.8AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/18 12:00 a.m.•43 views

PT-2024-12910 · Philips · Philips Vue Pacs

Name of the Vulnerable Software and Affected Versions: Philips Vue PACS affected versions not specified Description: The issue concerns the use of default credentials for potentially critical functionality in Philips Vue PACS. There is no information provided about the estimated number of...

9.8CVSS6.8AI score0.00338EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•8 views

CVE-2024-5632: Use of Default Credentials

Longse NVR Network Video Recorder model NVR3608PGE2W, as well as products based on this device, create a WiFi network with a default password. A user is neither advised to change it during the installation process, nor such a need is described in the manual. As the cameras from the same kit conne...

5.3CVSS5.8AI score0.00244EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/07/08 12:00 a.m.•340 views

Toshiba Printers Multiple Vulnerabilities (May 2024)

Multiple Toshiba printers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

9.8CVSS7.4AI score0.26811EPSS
SaveExploits2References5
Packet Storm
Packet Storm
•added 2024/07/04 12:00 a.m.•2184 views

Sharp Multi-Function Printer 18 Vulnerabilities

Hello, Please find a text-only version below sent to security mailing lists. The complete version on "17 vulnerabilities in Sharp Multi-Function Printers" is posted here: https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html The text version is also posted here:...

9.1CVSS7.1AI score0.50451EPSS
SaveExploits4
Positive Technologies
Positive Technologies
•added 2024/07/03 12:00 a.m.•27 views

PT-2025-54259

Name of the Vulnerable Software and Affected Versions Ksenia Security Lares 4.0 Home Automation version 1.6 Description Ksenia Security Lares 4.0 Home Automation version 1.6 has a default credentials issue that allows unauthorized access to administrative functions. Successful exploitation grants...

10CVSS6.7AI score0.00576EPSS
SaveExploits2References11
OSV
OSV
•added 2024/07/01 1:15 p.m.•15 views

CVE-2024-4007

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...

8.7CVSS5.8AI score0.01511EPSS
SaveExploits3References1
NVD
NVD
•added 2024/07/01 1:15 p.m.•41 views

CVE-2024-4007

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...

8.8CVSS0.01511EPSS
SaveExploits3References1
CNNVD
CNNVD
•added 2024/07/01 12:00 a.m.•21 views

Various ABB products Security breaches

ABB ASPECT and others are products of ABB Switzerland.ABB ASPECT is a scalable building energy management and control solution.ABB MATRIX is an embedded building automation network controller.ABB NEXUS is a wireless and wired solution. A security vulnerability exists in several ABB products that...

8.8CVSS6.8AI score0.01511EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•2 views

CVE-2024-4007: Use of Default Credentials

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured...

8.8CVSS7.8AI score0.01511EPSS
SaveExploits3References1
Tenable Nessus
Tenable Nessus
•added 2024/06/26 12:00 a.m.•23 views

MLflow Default Credentials

By default, MLflow does not require authentication to access the application. When enabling authentication, MLflow will enforce a basic authentication with default credentials. If not updated, a remote and unauthenticated attacker could access the MLflow UI and peform arbitrary actions on it. Thi...

7.8AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/06/26 12:00 a.m.•21 views

PT-2024-6673 · Abb · Abb Aspect +2

Name of the Vulnerable Software and Affected Versions: ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 Description: The issue is related to the use of default credentials in the installation package of the affected products, allowing an attacker to log in to wrongly configured product...

8.8CVSS7.5AI score0.01511EPSS
SaveExploits3References5
BDU FSTEC
BDU FSTEC
•added 2024/06/18 12:00 a.m.•25 views

The vulnerability of Netgear ProSafe NMS300 network devices’ microprogramming software, related to the use of default credentials, allows attackers to escalate their privileges.

The vulnerability of Netgear ProSafe NMS300 network device software relates to the use of default login credentials. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00568EPSS
SaveExploits0References4Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/06/17 6:21 a.m.•148 views

Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs

Overview MFPs multifunction printers provided by Toshiba Tec Corporation and Oki Electric Industry Co., Ltd. contain multiple vulnerabilities listed below. Improper Restriction of Recursive Entity References in DTDs 'XML Entity Expansion' CWE-776 - CVE-2024-27141, CVE-2024-27142 Execution with...

9.8CVSS7.5AI score0.26811EPSS
SaveExploits2References65
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/14 12:00 a.m.•7 views

CVE-2024-27158: Use of Default Credentials

All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL...

7.4CVSS5.8AI score0.00276EPSS
SaveExploits1References1
NVD
NVD
•added 2024/06/13 6:15 p.m.•34 views

CVE-2024-38282

Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system...

8.5CVSS0.00161EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/13 5:13 p.m.•66 views

CVE-2024-38282

CVE-2024-38282 affects Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600). Root cause: insufficient protection of credentials due to default credentials, enabling an attacker to log into the camera OS locally and modify operations or shut down the device (requires physical reboot). Imp...

8.5CVSS6.3AI score0.00161EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/13 5:13 p.m.•38 views

CVE-2024-38282 Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system...

8.5CVSS6.6AI score0.00161EPSS
SaveExploits0References1
Rows per page
Query Builder