Lucene search
+L

15068 matches found

Positive Technologies
Positive Technologies
•added 2021/07/19 12:00 a.m.•7 views

PT-2021-21087

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform affected versions not specified Description: The issue concerns the directory page parameter of the Orca HCM digital learning platform, which fails to filter special characters. This allows remote attackers ...

5.3CVSS0.01318EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/07/19 12:00 a.m.•9 views

PT-2021-21083

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform affected versions not specified Description: The issue concerns the upload function of the Orca HCM digital learning platform, where a specific parameter does not filter file formats. This allows remote...

10CVSS0.0241EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/07/19 12:00 a.m.•9 views

PT-2021-21088

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform affected versions not specified Description: The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly, allowing remote attackers to access the...

4.3CVSS0.01035EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/07/19 12:00 a.m.•17 views

LearningDigital Orca HCM digital learning platform 代码问题漏洞

LearningDigital Orca HCM digital learning platform is a digital learning platform from China's LearningDigital. The Orca HCM digital learning platform suffers from a code issue vulnerability that stems from specific parameters of the platform's upload function that do not filter file formats,...

10CVSS8.4AI score0.0241EPSS
SaveExploits0References3
Schneier on Security
Schneier on Security
•added 2021/07/16 8:03 p.m.•106 views

REvil is Off-Line

This is an interesting development: Just days after President Biden demanded that President Vladimir V. Putin of Russia shut down ransomware groups attacking American targets, the most aggressive of the groups suddenly went off-line early Tuesday. … Gone was the publicly available "happy blog" th...

0.5AI score
SaveExploits0
CNVD
CNVD
•added 2021/07/16 12:00 a.m.•63 views

Unspecified vulnerability in DEPSTECH WiFi Digital Microscope

DEPSTECH WiFi Digital Microscope is a wifi industrial endoscope from Shenzhen Shenhai Innovation Technology Co., Ltd. in China. DEPSTECH WiFi Digital Microscope 3 has a security vulnerability that allows remote attackers to change the SSID and password and demand a ransom from the legitimate devi...

8.1CVSS3.2AI score0.00941EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/07/16 12:00 a.m.•57 views

Unspecified vulnerability in DEPSTECH WiFi Digital Microscope (CNVD-2021-60544)

DEPSTECH WiFi Digital Microscope is a wifi industrial endoscope from Shenzhen Shenhai Innovation Technology Co., Ltd. in China. DEPSTECH WiFi Digital Microscope 3 has a security vulnerability that could be exploited by attackers to gain access to sensitive information...

6.5CVSS3.1AI score0.00941EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2021/07/16 12:00 a.m.•17 views

Western Digital My Cloud Multiple Products 5.0 < 5.15.106 Unauthorized Access Vulnerability (WDC-21009)

Multiple Western Digital My Cloud products are prone to a vulnerability that could allow unauthorized access via SSH. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

4.3CVSS6.2AI score0.9986EPSS
SaveExploits1References2
NVD
NVD
•added 2021/07/15 4:15 p.m.•35 views

CVE-2020-12733

Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account...

7.5CVSS0.01317EPSS
SaveExploits1References2
NVD
NVD
•added 2021/07/15 4:15 p.m.•26 views

CVE-2020-12734

DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings...

8.1CVSS0.00941EPSS
SaveExploits1References2
Prion
Prion
•added 2021/07/15 4:15 p.m.•24 views

Design/Logic Flaw

Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account...

5CVSS7.7AI score0.01317EPSS
SaveExploits1References2
Prion
Prion
•added 2021/07/15 4:15 p.m.•29 views

Design/Logic Flaw

DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings...

4.8CVSS8AI score0.00941EPSS
SaveExploits1References2
CVE
CVE
•added 2021/07/15 3:04 p.m.•61 views

CVE-2020-12732

The CVE-2020-12732 entry concerns DEPSTECH WiFi Digital Microscope 3, which ships with a default SSID Jetion_xxxxxxxx and a default password 12345678. Multiple connected sources (Red Hat, CNVD, CVE lists, etc.) confirm a vulnerability tied to these default credentials enabling access to sensitive...

6.5CVSS6.5AI score0.00941EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/07/15 3:04 p.m.•56 views

CVE-2020-12733

Summary of CVE-2020-12733 : A vulnerability in DEPSTECH WiFi Digital Microscope 3 (uses Shenzhen PENGLIXIN components) allows a TELNET connection using the molinkadmin password for the molink account. Documented across multiple sources (NVD, Red Hat, CVE listings, CNNVD) with consistent descripti...

7.5CVSS7.6AI score0.01317EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/07/15 3:04 p.m.•44 views

CVE-2020-12733

Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account...

7.7AI score0.01317EPSS
SaveExploits1References2
CVE
CVE
•added 2021/07/15 3:03 p.m.•59 views

CVE-2020-12734

DEPSTECH WiFi Digital Microscope 3 is affected. The vulnerability allows remote attackers to change the device’s SSID and password and potentially demand a ransom because there is no way to reset to Factory Default settings. The available documents describe the product and the insecure behavior b...

8.1CVSS8AI score0.00941EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/07/15 3:03 p.m.•43 views

CVE-2020-12734

DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings...

8.1AI score0.00941EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•13 views

CVE-2020-12733: Incorrect Authorization

Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account...

7.5CVSS5.8AI score0.01317EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/07/15 12:00 a.m.•5 views

PT-2021-9471

Name of the Vulnerable Software and Affected Versions DEPSTECH WiFi Digital Microscope 3 affected versions not specified Description The issue allows a TELNET connection with the molinkadmin password for the molink account. This is related to Certain Shenzhen PENGLIXIN components used by Shekar...

7.5CVSS0.01317EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•11 views

CVE-2020-12732: Initialization of a Resource with an Insecure Default

DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetionxxxxxxxx with a password of 12345678...

6.5CVSS5.7AI score0.00941EPSS
SaveExploits1References2
Rows per page
Query Builder