Lucene search
K

3819 matches found

CNVD
CNVD
added 2019/08/23 12:0 a.m.3 views

CloudBees Jenkins Assembla Auth Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Assembla Auth Plugin is used in which an OAut...

8.8CVSS7.1AI score0.01773EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/23 12:0 a.m.2 views

CloudBees Jenkins Perfecto Mobile Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Perfecto Mobile Plugin is used in one of the mobile...

6.5CVSS6.9AI score0.01186EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/23 12:0 a.m.1 views

CloudBees Jenkins Open STF Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Open STF Plugin is used in one of the STF...

6.5CVSS7.1AI score0.01226EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/23 12:0 a.m.2 views

CloudBees Jenkins Bugzilla Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Bugzilla Plugin is used in one of the error , change...

8.8CVSS7AI score0.01365EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/23 12:0 a.m.2 views

CloudBees Jenkins HockeyApp Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . HockeyApp Plugin is used in one of the...

8.8CVSS7AI score0.01365EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/23 12:0 a.m.2 views

CloudBees Jenkins WebSphere Deployer Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . WebSphere Deployer Plugin is used in which a...

8.8CVSS6.9AI score0.01365EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2019/08/12 5:49 p.m.16 views

Security Bulletin: IBM Secure Gateway is affected by two vulnerabilities

Summary Secure Gateway has addressed the following vulnerabilities: CVE-2019-4498 CVE-2019-4499 Vulnerability Details CVEID: CVE-2019-4498 DESCRIPTION: IBM Secure Gateway Service uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informatio...

0.3AI score
Exploits0Affected Software1
CNVD
CNVD
added 2019/08/12 12:0 a.m.1 views

Neet AirStream NAS 1.1 Trust Management Issue Vulnerability

The Neet AirStream NAS1.1 is a wireless audio receiver. A vulnerability with trust management issues exists in Neet AirStream NAS1.1. The vulnerability stems from the lack of an effective trust management mechanism in the network system or product. An attacker can exploit default passwords or...

8.8CVSS7AI score0.00636EPSS
Exploits1References1
Fortinet
Fortinet
added 2019/08/12 12:0 a.m.30 views

FortiRecorder sets credentials of FortiCameras to static values

An Use of Hard-coded Credentials vulnerability in FortiRecorder may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device...

7.5CVSS3.7AI score0.01518EPSS
Exploits2Affected Software1
ThreatPost
ThreatPost
added 2019/08/05 5:39 p.m.70 views

Puzzling Gwmndy Botnet Focuses on Low-Volume Proxy Connections

An odd botnet has been spotted targeting Fiberhome routers, in a quest to add 200 of them per day to its botnet web. That’s a low number in the world of botnets, according to 360 Netlab researchers, which observed a previously unknown malware strain called Gwmndy after the attackers’ domain name...

0.4AI score
Exploits0References5
CNVD
CNVD
added 2019/07/09 12:0 a.m.2 views

Odoo Trust Management Issues Vulnerabilities

Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. A trust managemen...

6.5CVSS6.9AI score0.0097EPSS
Exploits0References1
OSV
OSV
added 2019/07/02 6:15 p.m.3 views

CVE-2019-7261

Linear eMerge E3-Series devices have Hard-coded Credentials...

9.8CVSS7.3AI score0.05467EPSS
Exploits2References3
NVD
NVD
added 2019/07/02 6:15 p.m.24 views

CVE-2019-7261

Linear eMerge E3-Series devices have Hard-coded Credentials...

10CVSS9.6AI score0.05467EPSS
Exploits2References3
Cvelist
Cvelist
added 2019/07/02 5:3 p.m.23 views

CVE-2019-7261

Linear eMerge E3-Series devices have Hard-coded Credentials...

9.6AI score0.05467EPSS
Exploits2References3
CVE
CVE
added 2019/07/02 5:3 p.m.112 views

CVE-2019-7261

The CVE-2019-7261 entry affects Nice/Nortek Linear eMerge E3-Series devices (firmware 1.00-06 and earlier). The root cause is hard-coded credentials, including SSH access to root with embedded credentials, enabling full system compromise. Impact described across sources: remote access with high c...

10CVSS9.4AI score0.05467EPSS
Exploits2References3Affected Software1
0day.today
0day.today
added 2019/07/02 12:0 a.m.328 views

FaceSentry Access Control System 6.4.8 - Remote SSH Root Exploit

Exploit for hardware platform in category web applications !/usr/bin/env python -- coding: utf-8 -- FaceSentry Access Control System 6.4.8 Remote SSH Root Access Exploit Vendor: iWT Ltd. Product web page: http://www.iwt.com.hk Affected version: Firmware 6.4.8 build 264 Algorithm A16 Firmware 5.7....

7.1AI score0.0117EPSS
Exploits12
Positive Technologies
Positive Technologies
added 2019/07/02 12:0 a.m.2 views

PT-2019-18491 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue concerns hard-coded credentials in the Linear eMerge E3-Series devices. Recommendations: At the moment, there is no information about a newer version that...

10CVSS9.4AI score0.05467EPSS
Exploits2References4
OSV
OSV
added 2019/07/01 7:15 p.m.2 views

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

7.3CVSS7.1AI score0.01799EPSS
Exploits0References3
NVD
NVD
added 2019/07/01 7:15 p.m.20 views

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

7.5CVSS7.9AI score0.01799EPSS
Exploits0References3
Cvelist
Cvelist
added 2019/07/01 6:50 p.m.22 views

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

7.3AI score0.01799EPSS
Exploits0References3
Rows per page
Query Builder