Lucene search
K

7559 matches found

OSV
OSV
added 2021/03/21 9:15 p.m.3 views

CVE-2020-13963

SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp which is a guest account...

9.8CVSS5.8AI score0.01812EPSS
Exploits0References3
NVD
NVD
added 2021/03/21 9:15 p.m.13 views

CVE-2020-13963

SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp which is a guest account...

9.8CVSS0.01812EPSS
Exploits0References3
Prion
Prion
added 2021/03/21 9:15 p.m.14 views

Hardcoded credentials

SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp which is a guest account...

7.5CVSS9.5AI score0.01812EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/03/21 12:0 a.m.4 views

PT-2021-9684 · Unknown · Soplanning

Name of the Vulnerable Software and Affected Versions: SOPlanning versions prior to 1.47 Description: The issue is related to incorrect access control due to public secret key information and its related authentication algorithm. Specifically, the key for the admin account is hardcoded in the...

9.8CVSS9.4AI score0.01812EPSS
Exploits0References7
CNNVD
CNNVD
added 2021/03/16 12:0 a.m.3 views

GE Grid Solutions UR 信任管理问题漏洞

GE Grid Solutions UR is an embedded operating system from GE Grid Solutions, France. It provides high-performance protection, scalable I/O, integrated monitoring and metering, high-speed communications, and extensive programming and configuration capabilities. A trust management issue vulnerabili...

8.4CVSS6.7AI score0.00239EPSS
Exploits0References5
Prion
Prion
added 2021/03/15 10:15 p.m.15 views

Hardcoded credentials

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, hard-coded credentials in the ventilator allow attackers with physical access to obtain admin privileges for the device’s configuration interface...

3.6CVSS5AI score0.00272EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2021/03/09 6:15 p.m.21 views

Hardcoded credentials

Inappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS6.1AI score0.01705EPSS
Exploits1References7Affected Software3
Prion
Prion
added 2021/03/09 6:15 p.m.17 views

Hardcoded credentials

Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS6.2AI score0.01659EPSS
Exploits1References7Affected Software3
Prion
Prion
added 2021/02/26 2:15 a.m.11 views

Hardcoded credentials

The DOMParser API did not properly process '' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox 86...

4.3CVSS6AI score0.00753EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2021/02/24 5:15 p.m.12 views

Hardcoded credentials

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T versions 1.01.01 and prior...

10CVSS9.7AI score0.03612EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2021/02/24 4:15 p.m.3 views

CVE-2020-7846

Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page...

8.8CVSS7.4AI score0.01027EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2021/02/24 12:0 a.m.358 views

Backdoor.Win32.Delf.adag Hardcoded Credentials / Traversal

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/0e997ab441cd8c35010dd8db98aae2c2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Delf.adag Vulnerability: Weak Hardcoded Credentials Description: The backdoor runs an...

7.4AI score
Exploits0
CNVD
CNVD
added 2021/02/20 12:0 a.m.9 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11345)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded admin/1234 credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.17138EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.5 views

FiberHome HG6245D Hardcoded Credentials Vulnerability

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded admin/tele1234 credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.23633EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.3 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11344)

The HG6245D is an FTTH ONT router from FiberHome. A hardcoded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded user/8888888 credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.17138EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.4 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11341)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded admin/8888888 credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.14538EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.7 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11337)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded awnfibre/fibre@dm!n credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.23633EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.2 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11346)

The HG6245D is an FTTH ONT router from FiberHome. A hardcoded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded user/tattoo@home credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.26847EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.7 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11332)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded admin/admin credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.17138EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.8 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11342)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded L1vt1m4eng/8888888 credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.23633EPSS
Exploits1References1
Rows per page
Query Builder