Lucene search
+L

5856 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/03/25 12:00 a.m.•9 views

CVE-2008-1160: Use of Hard-coded Credentials

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a user, which allows remote attackers to gain privileges...

9.8CVSS8.2AI score0.14761EPSS
SaveExploits5References2
NVD
NVD
•added 2008/03/04 6:44 p.m.•16 views

CVE-2008-1079

The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges...

7.5CVSS7AI score0.01402EPSS
SaveExploits0References5
CVE
CVE
•added 2008/03/04 6:00 p.m.•47 views

CVE-2008-1079

CVE-2008-1079 affects Beehive Software SendFile.NET. The outboxWriteUnsent function in FTPThread.class within SendFile.jar uses hard-coded credentials for an FTP server, allowing remote attackers to gain privileges. The provided documents do not specify a patch or workaround; exploitation details...

7.5CVSS7AI score0.01402EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/03/04 12:00 a.m.•6 views

CVE-2008-1079: Undefined Security Weakness

The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges...

7.5CVSS5.9AI score0.01402EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2007/04/16 9:19 p.m.•9 views

CVE-2007-2032

Cisco Wireless Control System WCS before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014...

7.5CVSS5.8AI score0.01661EPSS
SaveExploits0References8
Prion
Prion
•added 2007/04/16 9:19 p.m.•24 views

Hardcoded credentials

Cisco Wireless Control System WCS before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014...

7.5CVSS7.5AI score0.01661EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/16 12:00 a.m.•6 views

CVE-2007-2032: Undefined Security Weakness

Cisco Wireless Control System WCS before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014...

7.5CVSS6.1AI score0.01661EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/03/07 12:00 a.m.•6 views

CVE-2006-7142: Use of Hard-coded Credentials

The centralized management feature for Utimaco Safeguard stores hard-coded cryptographic keys in executable programs for encrypted configuration files, which allows attackers to recover the keys from the configuration files and decrypt the disk drive...

7.8CVSS5.8AI score0.00321EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/27 12:00 a.m.•4 views

CVE-2006-7074: Use of Hard-coded Credentials

admin.php in SmartSiteCMS 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the userName cookie...

7.5CVSS5.9AI score0.0151EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/22 12:00 a.m.•7 views

CVE-2007-1063: Use of Hard-coded Credentials

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device...

10CVSS5.9AI score0.03375EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2006/11/03 12:00 a.m.•186 views

Barracuda Networks垃圾邮件防火墙多个安全漏洞

Barracuda Spam Firewall是用于保护邮件服务器的集成硬件和软件垃圾邮件解决方案。 Barracuda垃圾邮件防火墙Login.pm脚本中的guest帐号有硬编码的口令bnadmin99。尽管guest帐号仅有有限的访问能力,但还是可以获取以下信息: 系统配置,包括IP地址、管理员IP ACL; 邮件消息日志(但没有消息的内容); 垃圾邮件/杀毒定义的版本信息和系统固件版本。...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/27 12:00 a.m.•5 views

CVE-2006-5038: Undefined Security Weakness

The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 010207, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet...

7.5CVSS5.8AI score0.02351EPSS
SaveExploits0References1
NVD
NVD
•added 2006/06/28 11:05 p.m.•25 views

CVE-2006-3286

The internal database in Cisco Wireless Control System WCS for Linux and Windows before 3.263 stores a hard-coded username and password in plaintext within unspecified files, which allows remote authenticated users to access the database aka bug CSCsd15951...

7.5CVSS6.5AI score0.02681EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2006/06/28 11:00 p.m.•35 views

CVE-2006-3286

The internal database in Cisco Wireless Control System WCS for Linux and Windows before 3.263 stores a hard-coded username and password in plaintext within unspecified files, which allows remote authenticated users to access the database aka bug CSCsd15951...

6.5AI score0.02681EPSS
SaveExploits0References7
CVE
CVE
•added 2006/06/28 11:00 p.m.•55 views

CVE-2006-3286

The CVE-2006-3286 entry concerns Cisco Wireless Control System (WCS) for Linux and Windows prior to 3.2(63). The vulnerability arises from a hard-coded username and password stored in plaintext in unspecified files within the WCS database, enabling remote authenticated users to access the databas...

7.5CVSS6.8AI score0.02681EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/28 12:00 a.m.•6 views

CVE-2006-3286: Undefined Security Weakness

The internal database in Cisco Wireless Control System WCS for Linux and Windows before 3.263 stores a hard-coded username and password in plaintext within unspecified files, which allows remote authenticated users to access the database aka bug CSCsd15951...

7.5CVSS5.9AI score0.02681EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2006/05/31 10:00 p.m.•31 views

CVE-2006-2716

Secure Elements Class 5 AVR server aka C5 EVM before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server...

6.8AI score0.02151EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/31 12:00 a.m.•8 views

CVE-2006-2716: Undefined Security Weakness

Secure Elements Class 5 AVR server aka C5 EVM before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server...

7.5CVSS5.9AI score0.02151EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/24 12:00 a.m.•8 views

CVE-2005-3803: Use of Hard-coded Credentials

Cisco IP Phone VoIP 7920 1.08 contains certain hard-coded "fixed" public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information...

7.5CVSS5.8AI score0.02146EPSS
SaveExploits0References2
NVD
NVD
•added 2005/11/21 11:03 a.m.•23 views

CVE-2005-3716

The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that cannot be changed, which allows attackers to obtain sensitive information...

7.5CVSS7.3AI score0.01579EPSS
SaveExploits0References4
Rows per page
Query Builder