Lucene search
+L

1464 matches found

Tenable Nessus
Tenable Nessus
•added 2022/04/04 12:00 a.m.•51 views

FreeBSD : Gitlab -- multiple vulnerabilities (8657eedd-b423-11ec-9559-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8657eedd-b423-11ec-9559-001b217b3468 advisory. - Incorrect authorization in the Asana integration's branch restriction feature in all version...

9.8CVSS6.3AI score0.87946EPSS
SaveExploits8References19
Positive Technologies
Positive Technologies
•added 2022/04/01 12:00 a.m.•12 views

PT-2022-2064 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 14.7 prior to 14.7.7 GitLab CE/EE versions 14.8 prior to 14.8.5 GitLab CE/EE versions 14.9 prior to 14.9.2 Description: A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SA...

9.8CVSS9.2AI score0.75637EPSS
SaveExploits4References28
osv_cve
osv_cve
•added 2022/03/25 5:15 p.m.•16 views

CVE-2022-25577

ALF-BanCO v8.2.5 and below was discovered to use a hardcoded password to encrypt the SQLite database containing the user's data. Attackers who are able to gain remote or local access to the system are able to read and modify the data...

9.1CVSS7.3AI score0.01215EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/25 5:15 p.m.•4 views

CVE-2022-25577

ALF-BanCO v8.2.5 and below was discovered to use a hardcoded password to encrypt the SQLite database containing the user's data. Attackers who are able to gain remote or local access to the system are able to read and modify the data...

9.1CVSS5.4AI score0.01215EPSS
SaveExploits1References2
CVE
CVE
•added 2022/03/25 4:17 p.m.•107 views

CVE-2022-25577

ALF-BanCO vulnerable: v8.2.5 and earlier use a hardcoded password to encrypt the SQLite database, enabling read/modify access if an attacker gains remote or local system access. Root cause: hardcoded credentials in the application; affected component is the ALF-BanCO data encryption path for the ...

9.1CVSS9.1AI score0.01215EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/03/25 4:17 p.m.•49 views

CVE-2022-25577

ALF-BanCO v8.2.5 and below was discovered to use a hardcoded password to encrypt the SQLite database containing the user's data. Attackers who are able to gain remote or local access to the system are able to read and modify the data...

9.5AI score0.01215EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/03/25 12:00 a.m.•4 views

PT-2022-17379

Name of the Vulnerable Software and Affected Versions ALF-BanCO versions 8.2.5 and below Description The issue concerns the use of a hardcoded password to encrypt the SQLite database containing user data. Attackers with remote or local access to the system can read and modify the data...

9.1CVSS5.9AI score0.01215EPSS
SaveExploits1References4
Packet Storm
Packet Storm
•added 2022/03/04 12:00 a.m.•297 views

Backdoor.Win32.DirectConnection.103 Weak Hardcoded Password

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/6a6ce3e7f24bf000d9a011a8f1905da8.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.DirectConnection.103 1.0 RAT-Tool Vulnerability: Weak Hardcoded Password Description:...

SaveExploits0
NCSC
NCSC
•added 2022/02/24 12:00 a.m.•18 views

Vulnerabilities fixed in Trend Micro Server Protect

Trend Micro has fixed multiple vulnerabilities in Server Protect. The vulnerability with reference CVE-2022-25329 allows a remote malicious person to misuse a hardcoded password in order to perform administrative actions. perform. The other vulnerabilities allow an authenticated malicious person...

9.8CVSS7.2AI score0.05198EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2022/02/22 12:00 a.m.•246 views

Backdoor.Win32.Dsocks.10 Hardcoded Password

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/3a505e7ea1beee556860488e34db8da6.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Dsocks.10 Vulnerability: Hardcoded Cleartext Password Description: The malware Coded ...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2022/02/17 12:00 a.m.•222 views

Backdoor.Win32.Prorat.lkt Weak Hardcoded Password

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/65a53a37843db2b86a67a9e23277c1bf.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Prorat.lkt Vulnerability: Weak Hardcoded Password Description: The malware listens on...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2022/01/03 12:00 a.m.•213 views

Backdoor.Win32.Skrat Insecure Password Storage

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/d724feed69ec7b624e4e178ad6579cfb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Skrat Vulnerability: Cleartext Hardcoded Password Description: SKD RAT malware has...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2022/01/03 12:00 a.m.•272 views

Backdoor.Win32.Wollf.m Weak Hardcoded Password

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/b125a9a083447ad7d437e3e7f3ed5325.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wollf.m Vulnerability: Weak Hardcoded Password Description: The malware listens on TC...

0.2AI score
SaveExploits0
osv_cve
osv_cve
•added 2021/12/30 10:15 p.m.•21 views

CVE-2021-20170

Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted. This encryption is accomplished via a password-protected zip file with a hardcoded password...

8.8CVSS5.8AI score0.00504EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/30 10:15 p.m.•13 views

CVE-2021-20155

Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678"...

9.8CVSS7.7AI score0.01899EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/12/30 9:31 p.m.•47 views

CVE-2021-20155

Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678"...

9.7AI score0.01899EPSS
SaveExploits1References1
NVD
NVD
•added 2021/12/26 1:15 a.m.•28 views

CVE-2021-45522

NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password...

8.8CVSS0.00878EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/26 1:15 a.m.•28 views

CVE-2021-45520

Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10...

9.6CVSS0.00421EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/26 1:15 a.m.•38 views

CVE-2021-45521

Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10...

7.4CVSS0.00375EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/12/26 1:15 a.m.•22 views

CVE-2021-45520

Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10...

8.8CVSS5.8AI score0.00421EPSS
SaveExploits0References1
Rows per page
Query Builder