5653 matches found
CloudBees Jenkins HockeyApp Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . HockeyApp Plugin is used in one of the...
CVE-2019-6698: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device...
CloudBees Jenkins WebSphere Deployer Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . WebSphere Deployer Plugin is used in which a...
CloudBees Jenkins Assembla Auth Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Assembla Auth Plugin is used in which an OAut...
CloudBees Jenkins Perfecto Mobile Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Perfecto Mobile Plugin is used in one of the mobile...
CloudBees Jenkins Bugzilla Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Bugzilla Plugin is used in one of the error , change...
CloudBees Jenkins Open STF Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Open STF Plugin is used in one of the STF...
CVE-2016-10928: Use of Hard-coded Credentials
The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users...
CVE-2019-1935: Use of Hard-coded Credentials
A vulnerability in Cisco Integrated Management Controller IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account scpuser, which has default user...
Security Bulletin: IBM Secure Gateway is affected by two vulnerabilities
Summary Secure Gateway has addressed the following vulnerabilities: CVE-2019-4498 CVE-2019-4499 Vulnerability Details CVEID: CVE-2019-4498 DESCRIPTION: IBM Secure Gateway Service uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informatio...
FortiRecorder sets credentials of FortiCameras to static values
An Use of Hard-coded Credentials vulnerability in FortiRecorder may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device...
Neet AirStream NAS 1.1 Trust Management Issue Vulnerability
The Neet AirStream NAS1.1 is a wireless audio receiver. A vulnerability with trust management issues exists in Neet AirStream NAS1.1. The vulnerability stems from the lack of an effective trust management mechanism in the network system or product. An attacker can exploit default passwords or...
CVE-2018-20955: Use of Hard-coded Credentials
Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31...
Puzzling Gwmndy Botnet Focuses on Low-Volume Proxy Connections
An odd botnet has been spotted targeting Fiberhome routers, in a quest to add 200 of them per day to its botnet web. That’s a low number in the world of botnets, according to 360 Netlab researchers, which observed a previously unknown malware strain called Gwmndy after the attackers’ domain name...
CVE-2019-12797: Use of Hard-coded Credentials
A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary commands to an OBD-II bus of a vehicle...
CVE-2019-12327: Use of Hard-coded Credentials
Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed...
CVE-2019-9229: Use of Hard-coded Credentials
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers...
CVE-2019-1919: Use of Hard-coded Credentials
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
Odoo Trust Management Issues Vulnerabilities
Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. A trust managemen...