Lucene search
+L

10661 matches found

OSV
OSV
•added 2020/08/25 2:15 p.m.•13 views

CVE-2020-14510

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root...

9.8CVSS7.4AI score0.02487EPSS
SaveExploits0References1
NVD
NVD
•added 2020/08/25 2:15 p.m.•32 views

CVE-2020-14510

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root...

10CVSS9.7AI score0.02487EPSS
SaveExploits0References1
Prion
Prion
•added 2020/08/25 2:15 p.m.•38 views

Hardcoded credentials

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root...

10CVSS9.6AI score0.02487EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/08/25 1:19 p.m.•90 views

CVE-2020-14510

GateManager (Secomea) VPN server is affected by CVE-2020-14510 due to a hard-coded telnet credential, allowing an unprivileged attacker to execute commands as root. Affected: GateManager versions prior to 9.2c. Mitigation/remediation: update to 9.2c (or newer, per advisories) and apply provided p...

10CVSS9.7AI score0.02487EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/08/25 1:19 p.m.•45 views

CVE-2020-14510 OFF-BY-ONE ERROR CWE-193

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root...

9.8CVSS9.6AI score0.02487EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/25 12:00 a.m.•1 views

CVE-2020-14510: Off-by-one Error

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root...

10CVSS6AI score0.02487EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/21 12:00 a.m.•2 views

CVE-2020-24053: Use of Hard-coded Credentials

Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols...

7.5CVSS5.8AI score0.01246EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/21 12:00 a.m.•1 views

CVE-2020-24056: Use of Hard-coded Credentials

A hardcoded credentials vulnerability exists in Verint 5620PTZ VerintFW042, Verint 4320 V4320FW023, V4320FW031, and Verint S5120FD VerintFW042units. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols...

7.5CVSS5.8AI score0.01246EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2020/08/17 12:41 p.m.•108 views

Exploit for Improper Authentication in Microsoft

CVE-2020-0688 Microsoft Exchange Server Fixed Cryptographic Ke...

9CVSS9.6AI score0.99962EPSS
SaveExploits29
NVD
NVD
•added 2020/08/11 8:15 p.m.•28 views

CVE-2020-16170

Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can brute-force/guess a six-digit value via unspecified vectors...

7.5CVSS7.4AI score0.01869EPSS
SaveExploits1References2
OSV
OSV
•added 2020/08/11 8:15 p.m.•10 views

CVE-2020-16170

Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can brute-force/guess a six-digit value via unspecified vectors...

7.5CVSS7.1AI score0.01869EPSS
SaveExploits1References2
Prion
Prion
•added 2020/08/11 8:15 p.m.•23 views

Hardcoded credentials

Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can brute-force/guess a six-digit value via unspecified vectors...

5CVSS7.4AI score0.01869EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/08/11 7:16 p.m.•39 views

CVE-2020-16170

Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can brute-force/guess a six-digit value via unspecified vectors...

7.4AI score0.01869EPSS
SaveExploits1References2
CVE
CVE
•added 2020/08/11 7:16 p.m.•76 views

CVE-2020-16170

CVE-2020-16170,CVSS 8.2, arises from hard-coded Agora App ID in temi RoboX/phone apps, enabling brute-force joining of any ongoing tema calls by iterating channel IDs (six-digit session IDs). Root cause: App ID embedded in client code; lack of token protection for channel. Exploitation demonstrat...

7.5CVSS7.3AI score0.01869EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/11 12:00 a.m.•2 views

CVE-2020-16170: Use of Hard-coded Credentials

Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can brute-force/guess a six-digit value via unspecified vectors...

7.5CVSS5.7AI score0.01869EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/08/11 12:00 a.m.•14 views

PT-2020-14791 · Temi · Temi Robox Os +1

Name of the Vulnerable Software and Affected Versions: temi Robox OS versions prior to 120 temi Android app versions up to 1.3.7931 Description: The issue allows remote attackers to listen in on ongoing calls between temi robots and their users if they can brute-force or guess a six-digit value...

7.5CVSS7.4AI score0.01869EPSS
SaveExploits1References3
OSV
OSV
•added 2020/08/06 7:15 p.m.•15 views

CVE-2020-13793

Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key...

9.8CVSS7.3AI score0.01687EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/06 12:00 a.m.•2 views

CVE-2020-7352: Use of Hard-coded Credentials

The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embedded, static RSA private key, an attacker with this key material and local user permissions can effectively send any operating system command to the...

8.8CVSS5.8AI score0.03778EPSS
SaveExploits5References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/06 12:00 a.m.•3 views

CVE-2020-13793: Use of Hard-coded Credentials

Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key...

9.8CVSS5.8AI score0.01687EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/08/05 12:00 a.m.•9 views

IBM Security Secret Server Code Issue Vulnerability

IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. A security vulnerability exists in IBM Security Secret Server all editions...

9.8CVSS6.8AI score0.01029EPSS
SaveExploits0References1
Rows per page
Query Builder