Default credentials

Microsoft Forefront Unified Access Gateway UAG 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."...

Sourcefire Defense Center - multiple vulnerabilities.

Hi list, -- Product description from vendor site: The Sourcefire Defense CenterR management console is the "nerve center" of the Sourcefire 3DR System. It provides a powerful, easy-to-use interface for categorizing events, generating recurring reports, scheduling automated IPS, NGIPS, and NGFW...

Sourcefire Defense Center File Download / Cross Site Scripting

-- Product description from vendor site: The Sourcefire Defense CenterR management console is the "nerve center" of the Sourcefire 3DR System. It provides a powerful, easy-to-use interface for categorizing events, generating recurring reports, scheduling automated IPS, NGIPS, and NGFW detection...

ManageEngine DeviceExpert Default Administrator Credentials

The remote ManageEngine DeviceExpert install uses a default set of credentials 'admin' / 'admin' to control access to its management interface. With this information, an attacker can gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Default credentials

Unspecified vulnerability in the Tiny Password com.tinycouch.android.freepassword application 1.64 for Android has unknown impact and attack vectors...

UTC Fire & Security Master Clock contains hardcoded default administrator login credentials

Overview UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock have default administrator login credentials that can not be modified by an administrator. Description UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock via Zigbee can sync up to 60,000 slave clocks located throughout a campus-area...

Oracle WebCenter Content Default Administration Credentials

Nessus was able to login to Oracle WebCenter Content using a default set of administrative credentials. A remote attacker could utilize these credentials to view and delete protected content or change the content server configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

EMC Celerra Control Station Default Credentials

The remote host appears to be an EMC Celerra control station. Such devices come with two well known default credentials which give full control on the configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Tecomat Foxtrot Default Credentials (HTTP)

Tecomat Foxtrot is using known default credentials for the HTTP login. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Default credentials

Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than...

GE D20 Default Credentials

Binary data scadad20defaulttelnet.nbin...

Schweitzer Engineering Laboratories (SEL) Management Server Detection Default Level 1 Credentials (SCADA)

Binary data 6293.prm...

MicroLogix 1100 PLC Default Credentials

The remote device appears to be a MicroLogix 1100 PLC that can be accessed using default HTTP credentials. An attacker could leverage this issue to gain administrative access to the affected device. Binary data scadamicrologixdefaulthttp.nbin...

XAMPP WebDAV PHP Upload Vulnerability (Jan 2012) - Active Check

XAMPP is prone to a PHP upload vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apachefriends:xampp"; ifdescription...

GE PLC telnet Server Default Account/Password (SCADA)

Binary data 6283.prm...

CVE-2011-4048

The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials...

Default credentials

The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials...

CVE-2011-4048

Dell KACE K2000 System Deployment Appliance is affected by CVE-2011-4048 due to a default username/password for the read-only reporting account, enabling remote attackers to access the database and obtain sensitive information. The issue is described in multiple sources referencing default creden...

CVE-2011-4048

The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials...

Cisco Network Registrar Default Credentials Authentication Bypass (CVE-2011-2024)

An authentication bypass vulnerability has been reported in Cisco Network Registrar. The vulnerability is due to the usage of a default password for the administrative account. A remote attacker may exploit this vulnerability by logging in to the web administration console. By doing this, an...