4883 matches found
CVE-2019-16734
Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...
Default credentials
Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...
CVE-2019-16734
CVE-2019-16734 affects Petwant PF-103 and Petalk AI with firmware versions 4.3.2.50 / 3.2.2.30, where the TELNET server uses default credentials, enabling remote attackers to execute arbitrary commands as root. Red Hat and other feeds corroborate the default-credential issue, describing it as a t...
CVE-2019-16734
Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...
Default credentials
An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetails from hostdetails" at the /event/runquery.do endpoint, it is possible to bypass the security restrictions that prevent even administrative users from viewing credential data...
PT-2019-14802
Name of the Vulnerable Software and Affected Versions Petwant PF-103 firmware version 4.3.2.50 Petalk AI version 3.2.2.30 Description The issue allows remote attackers to execute arbitrary system commands as the root user due to the use of default credentials for the TELNET server. Recommendation...
Default credentials
The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the admin password. If they do not use that URL, there is an overlooked default password for the admin user. This was resolved in Puppet Enterprise 2019.0.3 and...
Cisco UCS Director SCP User Default Credentials (cisco-sa-20190821-imcs-usercred)
According to its self-reported version, the remote host is running a version of Cisco UCS Director that uses default credentials for the 'scpuser' account. A remote attacker can exploit this to log into the system's CLI and execute arbitrary commands with the privileges of the 'scpuser' account,...
Default credentials
openstack-utils openstack-db has insecure password creation...
Default credentials
IBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 through 2018.4.1.5 have a default administrator account that is enabled if the IPMI LAN channel is enabled. A remote attacker could use this account to gain unauthorised access to the BMC. IBM X-Force ID: 168883...
Unikrn: Staging Rabbitmq instance is exposed to the internet with default credentials
Description: RabbitMQ is an open-source message-broker software sometimes called message-oriented middleware that originally implemented the Advanced Message Queuing Protocol AMQP and has since been extended with a plug-in architecture to support Streaming Text Oriented Messaging Protocol STOMP,...
Default credentials
Improper handling of closenotify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00...
Default credentials
A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none LDAP anonymous bind, any password, invalid or valid will be accepted...
Default credentials
piwigo has XSS in password.php...
PT-2019-6116
Name of the Vulnerable Software and Affected Versions FreeSWITCH versions 1.6.10 through 1.10.1 Description The issue is related to the use of default credentials in the event socket.conf.xml configuration file. This could allow a remote attacker to gain full control over the system...
CVE-2019-19469
In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...
CVE-2019-19469
In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...
Command injection
In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...
Default credentials
relayopen in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service such as relay blockage by triggering a NULL allocpercpu result...