1466 matches found
Ubuntu 14.04 LTS / 16.04 LTS : Django vulnerabilities (USN-3115-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3115-1 advisory. Marti Raudsepp discovered that Django incorrectly used a hardcoded password when running tests on an Oracle database. A remote attacker could...
USN-3115-1 python-django vulnerabilities
Marti Raudsepp discovered that Django incorrectly used a hardcoded password when running tests on an Oracle database. A remote attacker could possibly connect to the database while the tests are running and prevent the test user with the hardcoded password from being removed. CVE-2016-9013 Aymeri...
USN-3115-1: Django vulnerabilities
Marti Raudsepp discovered that Django incorrectly used a hardcoded password when running tests on an Oracle database. A remote attacker could possibly connect to the database while the tests are running and prevent the test user with the hardcoded password from being removed. CVE-2016-9013 Aymeri...
PT-2016-7619
Name of the Vulnerable Software and Affected Versions Django versions 1.8.x through 1.8.15 Django versions 1.9.x through 1.9.10 Django versions 1.10.x through 1.10.2 Description The issue allows remote attackers to obtain access to the database server by leveraging failure to manually specify a...
CVE-2016-9013
Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually...
CVE-2016-6532
DEXIS Imaging Suite 10 has a hardcoded password for the sa account, which allows remote attackers to obtain administrative access by entering this password in a DEXISDATA SQL Server session...
CVE-2016-6531
Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveraging access to intranet TCP port 3306. NOTE: the vendor disputes this issue, stating that the "vulnerability note ... is factually false ... there is indeed a...
CVE-2016-6532
CVE-2016-6532 affects DEXIS Imaging Suite 10, which contains hard-coded credentials for the sa account, enabling remote administrative access to the DEXIS_DATA SQL Server session. The vulnerability emerges from hard-coded database credentials and can lead to full compromise of the patient databas...
CVE-2016-6532
DEXIS Imaging Suite 10 has a hardcoded password for the sa account, which allows remote attackers to obtain administrative access by entering this password in a DEXISDATA SQL Server session...
CVE-2016-6531
CVE-2016-6531 concerns Open Dental (versions 16.1 and earlier) with a vulnerability stemming from a default MySQL credential setup. A hardcoded/blank root password (as noted by sources) could allow an attacker with network access to the Open Dental MySQL database to read, modify, or delete data. ...
CVE-2016-6531: Undefined Security Weakness
Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows remote attackers to obtain administrative access by leveraging access to intranet TCP port 3306. NOTE: the vendor disputes this issue, stating that the "vulnerability note ... is factually false ... there is indeed a...
PT-2016-6975 · Open Dental · Open Dental
Name of the Vulnerable Software and Affected Versions: Open Dental versions 16.1 and earlier Description: The issue concerns a hardcoded MySQL root password, which could allow remote attackers to gain administrative access by leveraging access to intranet TCP port 3306. The vendor disputes this...
PT-2016-6976
Name of the Vulnerable Software and Affected Versions DEXIS Imaging Suite version 10 Description The issue allows remote attackers to gain administrative access by using a hardcoded password for the sa account in a DEXIS DATA SQL Server session. Recommendations For DEXIS Imaging Suite version 10,...
CVE-2016-5677
NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an nvrstatus.php request...
CVE-2016-5677
NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an nvrstatus.php request...
CVE-2016-5677
NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an nvrstatus.php request...
CVE-2016-5677
CVE-2016-5677 affects NUUO NVRmini 2, NVRsolo, and NETGEAR ReadyNAS Surveillance (firmware 1.1.1–1.4.1). A hidden page (nvr_status _.php) uses hardcoded credentials nuuoeng:qwe23622260, enabling an unauthenticated attacker to retrieve sensitive information (current processes, memory, filesystem s...
PT-2016-6633
Name of the Vulnerable Software and Affected Versions NUUO NVRmini 2 versions 1.7.5 through 3.0.0 NUUO NVRsolo versions 1.0.0 through 3.0.0 NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1 Description The issue allows remote attackers to obtain sensitive information due to a hardcoded...
CVE-2016-5677: Exposure of Sensitive Information to an Unauthorized Actor
NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an nvrstatus.php request...