Ubiquiti UniFi Input Validation Error Vulnerability

Ubiquiti UniFi is a wireless networking system from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti UniFi Access Points 6.5.50 and earlier, and Switches 6.5.32 and earlier, which stems from an integer overflow vulnerability in UniFi Access Points and Switches except Switch Flex Mini wi...

Dell EMC XtremIO XMS Security Vulnerability

Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. A security vulnerability exists in Dell EMC XtremIO XMS versions prior to 6-4-1.11. A remote, read-only user may be able to exploit this vulnerability to enforce the add or remove QoS Quality...

Temporal Server 安全漏洞

Temporal Server is a microservices orchestration platform from Temporal. A security vulnerability exists in Temporal Server that stems from insecure default settings...

CVE-2023-25187

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures do not change factory-time installed default SSH public/private key values that are specific to a network operator. As a result, the CSP internal BTS network SSH server disable...

CVE-2023-31142 Discourse's general category permissions could be set back to default

Discourse is an open source discussion platform. Prior to version 3.0.4 of the stable branch and version 3.1.0.beta5 of the beta and tests-passed branches, if a site has modified their general category permissions, they could be set back to the default. This issue is patched in version 3.0.4 of t...

Design/Logic Flaw

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60. Affected devices are missing cookie protection flags when using the default settings. ...

CVE-2023-31238

A vulnerability has been identified in SICAM P850 7KG8500-0AA00-0AA0 All versions V3.11, SICAM P850 7KG8500-0AA00-2AA0 All versions V3.11, SICAM P850 7KG8500-0AA10-0AA0 All versions V3.11, SICAM P850 7KG8500-0AA10-2AA0 All versions V3.11, SICAM P850 7KG8500-0AA30-0AA0 All versions V3.11, SICAM P8...

Anuranan SBAdmin 2 Insecure Settings

==================================================================================================================================== | Title : Anuranan SBAdmin 2 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 113.0.1 64...

CVE-2023-32698 nfpm vulnerable to Incorrect Default Permissions

nFPM is an alternative to fpm. The file permissions on the checked-in files were not maintained. Hence, when nfpm packaged the files without extra config for enforcing it’s own permissions files could go out with bad permissions chmod 666 or 777. Anyone using nfpm for creating packages without...

hyiplab 2.1 Default Credentials

==================================================================================================================================== | Title : hyiplab V2.1 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 108.064-bit | |...

CVE-2023-32668

LuaTeX before 1.17.0 allows a document compiled with the default settings to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5...

CVE-2023-0847

The Sub-IoT implementation of the DASH 7 Alliance protocol has a vulnerability that can lead to an out-of-bounds write prior to implementation version 0.5.0. If the protocol has been compiled using default settings, this will only grant the attacker access to allocated but unused memory. However,...

CVE-2023-0847

The Sub-IoT implementation of the DASH 7 Alliance protocol has a vulnerability that can lead to an out-of-bounds write prior to implementation version 0.5.0. If the protocol has been compiled using default settings, this will only grant the attacker access to allocated but unused memory. However,...

Sub-IoT 缓冲区错误漏洞

Sub-IoT is an open source stack of the Dash7 Alliance protocol for Sub-IoT. A buffer error vulnerability exists in Sub-IoT DASH 7 Alliance protocol implementation prior to version 0.5.0, which stems from Sub-IoT A security issue exists that can lead to out-of-bounds writes, which would only allow...

Kshitish 2.0 Default Credentials

==================================================================================================================================== | Title : kshitish v2.0 Multipurpose eCommerce Platform Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...

K04280042: BIG-IP ASM vulnerability CVE-2019-6650

Security Advisory Description F5 BIG-IP ASM may expose sensitive information and allow the system configuration to be modified when using non-default settings. CVE-2019-6650 Impact The vulnerability is only present on multi-bladed systems VIPRION with BIG-IP ASM provisioned, on the following...

SUSE CVE-2010-2247

makepasswd 1.10 default settings generate insecure passwords...

SUSE CVE-2017-7532

In Moodle 3.x, course creators are able to change system default settings for courses...

SUSE CVE-2018-1000151

A man in the middle vulnerability exists in Jenkins vSphere Plugin 2.16 and older in VSphere.java that disables SSL/TLS certificate validation by default...

SUSE CVE-2022-23595

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...