Lucene search
+L

3906 matches found

Github Security Blog
Github Security Blog
added 2023/03/08 12:30 p.m.29 views

Easy!Appointments uses hard-coded credentials

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments 1.4.3 and prior. A patch is available and anticipated to be part of version 1.5.0...

9.8CVSS9AI score0.00743EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2023/03/08 11:15 a.m.35 views

CVE-2023-1269

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

9.8CVSS7.2AI score0.00743EPSS
SaveExploits1References2
Prion
Prion
added 2023/03/08 11:15 a.m.15 views

Hardcoded credentials

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

6.4CVSS9.5AI score0.00743EPSS
SaveExploits1References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/03/08 6:12 a.m.9 views

Multiple vulnerabilities in Buffalo network devices

Overview Multiple network devices provided by BUFFALO INC. contain multiple vulnerabilities listed below. Use of hard-coded credentials CWE-798 - CVE-2023-26588 Improper access control CWE-284 - CVE-2023-24544 Stored cross-site scripting CWE-79 - CVE-2023-24464 Impact An attacker may access the...

8.1CVSS6.3AI score0.03551EPSS
SaveExploits4References11
Positive Technologies
Positive Technologies
added 2023/03/08 12:0 a.m.7 views

PT-2023-16850 · Unknown · Easyappointments

Name of the Vulnerable Software and Affected Versions: easyappointments versions prior to 1.5.0 Description: The issue concerns the use of hard-coded credentials in the GitHub repository alextselegidis/easyappointments. Recommendations: For versions prior to 1.5.0, update to version 1.5.0 or late...

9.8CVSS6.6AI score0.00743EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2023/03/08 12:0 a.m.7 views

CVE-2023-1269 Use of Hard-coded Credentials in alextselegidis/easyappointments

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

6.5CVSS7.2AI score0.00743EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/03/08 12:0 a.m.47 views

CVE-2023-1269 Use of Hard-coded Credentials in alextselegidis/easyappointments

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

6.5CVSS9.8AI score0.00743EPSS
SaveExploits1References2
OSV
OSV
added 2023/03/08 12:0 a.m.20 views

CVE-2023-1269 Use of Hard-coded Credentials in alextselegidis/easyappointments

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

6.5CVSS6.9AI score
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2023/03/08 12:0 a.m.52 views

Use of Hard-coded Credentials

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

9.8CVSS9AI score0.00743EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2023/03/08 12:0 a.m.13 views

Easy!Appointments 信任管理问题漏洞

Easy!Appointments is a web-based appointment and schedule management system. A vulnerability with trust management issues exists in versions prior to Easy!Appointments 1.5.0, which stems from the software's use of hard-coded credentials...

9.8CVSS6.9AI score0.00743EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/07 12:0 a.m.10 views

Buffalo network devices 安全漏洞

Buffalo network devices are a family of network devices from Buffalo, Japan. A security vulnerability exists in Buffalo network devices that stems from the use of hard-coded credentials, which could be exploited by an attacker to gain access to the debugging capabilities of the product...

7.5CVSS6.8AI score0.00575EPSS
SaveExploits0References4
NVD
NVD
added 2023/03/06 12:15 a.m.27 views

CVE-2023-22344

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336...

9.8CVSS9.1AI score0.00861EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/06 12:15 a.m.7 views

CVE-2023-22344

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336...

9.8CVSS6.2AI score0.00861EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/06 12:0 a.m.10 views

Rakuraku PC Cloud Agent 信任管理问题漏洞

Rakuraku PC Cloud Agent is a cloud environment client. A security vulnerability exists in SS1 Ver.13.0.0.40 and earlier versions, Rakuraku PC Cloud Agent Ver.2.1.8 and earlier versions, which stems from the use of hard-coded credentials. An attacker could exploit the vulnerability to obtain...

9.8CVSS7.8AI score0.00861EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/03/05 12:0 a.m.30 views

CVE-2023-22344

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336...

9.3AI score0.00861EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/05 12:0 a.m.4 views

PT-2023-18443 · Dos Co. +1 · Ss1/Rakuraku Pc Cloud +2

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336...

9.8CVSS9AI score0.01099EPSS
SaveExploits0References8
CVE
CVE
added 2023/03/05 12:0 a.m.53 views

CVE-2023-22344

CVE-2023-22344 concerns hard-coded credentials in SS1 v13.0.0.40 and earlier and Rakuraku PC Cloud Agent v2.1.8 and earlier, enabling a remote attacker to obtain the debug password and execute it. The vulnerability is described in Red Hat and NVD sources as enabling a remote code execution with S...

9.8CVSS9AI score0.00861EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2023/03/05 12:0 a.m.5 views

CVE-2023-22344

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336...

8.2AI score0.00861EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/03/01 6:57 a.m.5 views

Multiple vulnerabilities in SS1 and Rakuraku PC Cloud

Overview SS1 is asset management software and Rakuraku PC Cloud is cloud-based asset management service. SS1 and Rakuraku PC Cloud Agent contain multiple vulnerabilities listed below. Improper Access Control CWE-284 - CVE-2023-22335 Path Traversal CWE-22 - CVE-2023-22336 Use of Hard-coded...

9.8CVSS7.8AI score0.01099EPSS
SaveExploits0References11
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/03/01 12:0 a.m.50 views

JVN#57224029: Multiple vulnerabilities in SS1 and Rakuraku PC Cloud

SS1 is asset management software and Rakuraku PC Cloud is cloud-based asset management service. SS1 and Rakuraku PC Cloud Agent contain multiple vulnerabilities listed below. Improper Access Control CWE-284 - CVE-2023-22335 Version| Vector| Score ---|---|--- CVSS v3|...

9.8CVSS9.4AI score0.01099EPSS
SaveExploits0
Rows per page
Query Builder