Lucene search
+L

8439 matches found

OSV
OSV
added 2021/07/19 5:15 p.m.7 views

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS5.8AI score0.00418EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/07/19 5:15 p.m.6 views

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS6.7AI score0.00418EPSS
SaveExploits0References4
CVE
CVE
added 2021/07/19 4:31 p.m.105 views

CVE-2021-36799

CVE-2021-36799 : KNX ETS5 through 5.7.6 uses a hard-coded password (ETS5Password) with a salt value (Ivan Medvedev), enabling local users to read project information. This vulnerability is limited to products no longer supported by the maintainer. No public remediation or patch details are provid...

8.8CVSS6AI score0.00418EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/07/19 4:31 p.m.59 views

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

6.4AI score0.00418EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/07/19 11:36 a.m.6 views

CVE-2021-35965

The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text, thus remote attackers can obtain administrator’s privilege without logging in...

10CVSS7.3AI score0.02378EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/07/19 12:00 a.m.29 views

(0Day) WSO2 API Manager JMX Use of Hard-coded Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WSO2 API Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the JMX RMI service, which listens on TCP port 11111 by default. The service contains a...

9.8CVSS3.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/07/19 12:00 a.m.17 views

PT-2021-21366 · Knx Ets · Knx Ets

Name of the Vulnerable Software and Affected Versions: KNX ETS versions 5 through 5.7.6 Description: The issue allows local users to read project information due to the use of a hard-coded password ETS5Password with a salt value of Ivan Medvedev. This problem is specific to products that are no...

8.8CVSS6.7AI score0.00418EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2021/07/19 12:00 a.m.11 views

KNX ETS5 Professional 信任管理问题漏洞

KNX ETS5 Professional is an application software from KNX Corp. a manufacturer-independent configuration software tool for designing and configuring smart home and building controls using the KNX system. A trust management issue vulnerability exists in KNX ETS5 Professional that stems from the...

8.8CVSS6.7AI score0.00418EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/07/19 12:00 a.m.12 views

LearningDigital Orca HCM digital learning platform 安全漏洞

LearningDigital Orca HCM digital learning platform is a digital learning platform from China-based LearningDigital. A security vulnerability exists in the Orca HCM digital learning platform, which stems from the platform's use of a weak factory default administrator password, which is hard-coded...

10CVSS8.4AI score0.02378EPSS
SaveExploits0References3
NVD
NVD
added 2021/07/16 4:15 p.m.28 views

CVE-2021-35961

Dr. ID Door Access Control and Personnel Attendance Management system uses the hard-code admin default credentials that allows remote attackers to access the system through the default password and obtain the highest permission...

10CVSS0.02187EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/16 4:15 p.m.10 views

CVE-2021-35961

Dr. ID Door Access Control and Personnel Attendance Management system uses the hard-code admin default credentials that allows remote attackers to access the system through the default password and obtain the highest permission...

9.8CVSS5.8AI score0.02187EPSS
SaveExploits0References2
NVD
NVD
added 2021/07/16 11:15 a.m.42 views

CVE-2021-21820

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

10CVSS0.02962EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/16 11:15 a.m.11 views

CVE-2021-21820

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

9.8CVSS7.4AI score0.02962EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/16 11:15 a.m.25 views

CVE-2021-21818

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

7.5CVSS0.01691EPSS
SaveExploits2References1
OSV
OSV
added 2021/07/16 11:15 a.m.11 views

CVE-2021-21818

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

7.5CVSS5.8AI score0.01691EPSS
SaveExploits2References1
Prion
Prion
added 2021/07/16 11:15 a.m.30 views

Hardcoded credentials

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

7.5CVSS9.6AI score0.02962EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/16 11:15 a.m.5 views

CVE-2021-21820

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

10CVSS7.3AI score0.02962EPSS
SaveExploits1References2
Prion
Prion
added 2021/07/16 11:15 a.m.27 views

Hardcoded credentials

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

5CVSS7.4AI score0.01691EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2021/07/16 10:24 a.m.117 views

CVE-2021-21818

The provided connected document TALOS-2021-1283 details a vulnerability in D-LINK DIR-3040 (1.13B03) where the Zebra IP Routing Manager exposes a hard-coded password. The Zebra service runs by default on TCP port 2601 and can be accessed remotely, with a configuration file containing the password...

7.5CVSS7.4AI score0.01691EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2021/07/16 10:24 a.m.42 views

CVE-2021-21818

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

7.5CVSS7.7AI score0.01691EPSS
SaveExploits2References1
Rows per page
Query Builder