Lucene search
+L

17019 matches found

NVD
NVD
added 2015/10/28 10:59 a.m.16 views

CVE-2015-3968

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21...

7.5CVSS6.7AI score0.02266EPSS
SaveExploits0References1
Prion
Prion
added 2015/10/28 10:59 a.m.18 views

Default credentials

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21...

7.5CVSS7.2AI score0.02266EPSS
SaveExploits0References1
CVE
CVE
added 2015/10/28 10:00 a.m.74 views

CVE-2015-3968

Summary of CVE-2015-3968 : The Janitza UMG power quality devices (models 508, 509, 511, 604, 605) expose an FTP interface protected by a default/password-hardcoded credential, enabling remote attackers to read or write files via TCP port 21. The root cause is weak/default credentials in the devic...

7.5CVSS6.8AI score0.02266EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
added 2015/10/28 10:00 a.m.29 views

CVE-2015-3968

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21...

6.6AI score0.02266EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/10/26 12:00 a.m.370 views

Juniper Junos SRX Series FTP ALG ftps-extension TCP Port Exposure (JSA10706)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a flaw in handling the ftps-extension option when the SRX secures the FTPS server. An unauthenticated, remote attacker can exploit this flaw to expose TCP ports for arbitrary data channels. No...

6.5CVSS6.7AI score0.00476EPSS
SaveExploits4References2
Exploit DB
Exploit DB
added 2015/10/22 12:00 a.m.68 views

Beckhoff CX9020 CPU Module - Remote Code Execution

!/usr/bin/env python ''' Exploit Title: Beckhoff CX9020 CPU Module Web Exploit RCE Date: 2015-10-22 Exploit Author: Photubias - tijldotdeneutathowestdotbe, based on work by Frank Lycops [email protected] Vendor Homepage: https://www.beckhoff.com/english.asp?embeddedpc/cx9020.htm...

9CVSS5.2AI score0.05734EPSS
SaveExploits6
BDU FSTEC
BDU FSTEC
added 2015/10/21 12:00 a.m.13 views

The vulnerability of Schneider Electric’s Quantum Ethernet Module allows a remote intruder to gain privileged access to the system.

The vulnerability of Schneider Electric’s Quantum Ethernet Module is related to the presence of rigidly encrypted data for default authentication through ports such as TELNET, FTP, or Windriver Debug for accounts like AUTCSE, AUTCSE, fdrusers, ftpuser, loader, nic2212, nimrohs2212, nip2212,...

10CVSS7.8AI score0.03894EPSS
SaveExploits1References7
zdt
zdt
added 2015/10/15 12:00 a.m.53 views

PROLiNK H5004NK ADSL Wireless Modem - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: PROLiNK H5004NK ADSL Wireless Modem Multiple Vulnerabilities Discovered by: Karn Ganeshen Reported on: October 13, 2015 Vendor Response: No process to handle vuln reports Vendor Homepage:...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2015/10/15 12:00 a.m.37 views

Mageia: Security Advisory (MGASA-2015-0260)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.6AI score0.9986EPSS
SaveExploits1References5
Packet Storm
Packet Storm
added 2015/10/15 12:00 a.m.42 views

PROLiNK H5004NK Backdoor Accounts / RBAC Failure / CSRF

Exploit Title: PROLiNK H5004NK ADSL Wireless Modem Multiple Vulnerabilities Discovered by: Karn Ganeshen Reported on: October 13, 2015 Vendor Response: No process to handle vuln reports Vendor Homepage: http://www.prolink2u.com/newtemp/datacom/adsl-modem-router/381-h5004nk.html Version Affected:...

0.5AI score
SaveExploits0
exploitpack
exploitpack
added 2015/10/15 12:00 a.m.48 views

PROLiNK H5004NK ADSL Wireless Modem - Multiple Vulnerabilities

PROLiNK H5004NK ADSL Wireless Modem - Multiple Vulnerabilities Exploit Title: PROLiNK H5004NK ADSL Wireless Modem Multiple Vulnerabilities Discovered by: Karn Ganeshen Reported on: October 13, 2015 Vendor Response: No process to handle vuln reports Vendor Homepage:...

0.1AI score
SaveExploits0
zdt
zdt
added 2015/10/15 12:00 a.m.50 views

netis RealTek Wireless Router / ADSL Modem - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: netis RealTek wireless router / ADSL modem Multiple Vulnerabilities Discovered by: Karn Ganeshen Reported on: October 13, 2015 Vendor Response: Vulnerability? What's this? Vendor Homepage: www.netis-systems.com Version...

7.1AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2015/10/14 12:00 a.m.30 views

Xlink FTP Server Request Buffer Overflow (CVE-2006-5792)

A buffer overflow vulnerability exists in Xlink FTP server that comes bundled with Omni-NFS Enterprise 5.2. A remote attacker may send an overly long FTP request to the server which allows arbitrary code execution...

7.5CVSS4.4AI score0.60257EPSS
SaveExploits7
CNVD
CNVD
added 2015/10/13 12:00 a.m.34 views

Konica Minolta FTP Utility Buffer Overflow Vulnerability

KONICA MINOLTA FTP Utility is a software used by KONICA MINOLTA copiers. Konica Minolta FTP Utility 1.0 is implemented with a buffer overflow vulnerability due to a failure to check the input size when parsing CWD commands. A remote attacker can exploit this vulnerability to execute arbitrary cod...

7.5CVSS8.3AI score0.63209EPSS
SaveExploits5References1
OpenVAS
OpenVAS
added 2015/10/13 12:00 a.m.39 views

SUSE: Security Advisory for wget (SUSE-SU-2014:1366-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.1AI score0.39883EPSS
SaveExploits4References1
seebug.org
seebug.org
added 2015/10/10 12:00 a.m.721 views

用友致远A6协同管理系统多处敏感信息泄露

用友致远A6协同管理系统:面向广大的企事业组织应用设计,是一个基于互联网的高效协同工作平台和优秀的协同管理系统。它融入先进的协同管理理念,运用领先的网络技术,切实有效的解决企事业组织工作管理中的关键应用。利用它可把日常管理中的业务、事务、事件等信息在单位、部门、组群、个人之间进行及时高效、有序可控、全程共享的沟通和处理。是一套非常适合国情的、并具有很高性价比的软件。 漏洞描述: 用友致远A6协同管理系统多处敏感信息泄露漏洞 漏洞分析: 用友致远A6协同管理系统对敏感文件的访问权限设置不当,导致多处敏感信息泄漏。 /yyoa/assess/js/initDataAssess.jsp...

7.1AI score
SaveExploits0
zdt
zdt
added 2015/10/10 12:00 a.m.37 views

FerretCMS 2.0.2-alpha - CSRF / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Title : FerretCMS 2.0.2-alpha - Exploit CSRF Vulnerability Author : ZwX Date : 24/02/2015 Download : https://codeload.github.com/JRogaishio/ferretCMS/zip/master Vendor : https://github.com/JRogaishio Level Security : Hight Tested on : Windows ...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2015/10/10 12:00 a.m.10 views

PCMan FTP Server Information Disclosure Vulnerability

PCMan FTP Server is FTP server software. A directory traversal vulnerability exists in PCMan FTP Server version 2.0.7, which can be exploited by a remote attacker to read arbitrary files via the RETR command inside the "... /" within the RETR command, this vulnerability can be exploited to read...

7.8CVSS7.1AI score0.58334EPSS
SaveExploits4References1
CNVD
CNVD
added 2015/10/10 12:00 a.m.11 views

Konica Minolta FTP Utility Directory Traversal Vulnerability

Konica Minolta FTP Utility is a free program from Konica Minolta Japan for receiving data sent from compatible devices. A directory traversal vulnerability exists in Konica Minolta FTP Utility version 1.0. A remote attacker could leverage the '... /' string in the RETR command to read arbitrary...

7.8CVSS7.1AI score0.60676EPSS
SaveExploits4References1
NVD
NVD
added 2015/10/09 2:59 p.m.21 views

CVE-2015-7768

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command...

7.5CVSS7.9AI score0.63209EPSS
SaveExploits5References5
Rows per page
Query Builder