2771 matches found
CVE-2010-2468
The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a weak hash algorithm for storing the Administrator password, which makes it easier for context-dependent attackers to obtain privileged access by recovering the cleartext of this password...
CVE-2010-2468: Undefined Security Weakness
The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a weak hash algorithm for storing the Administrator password, which makes it easier for context-dependent attackers to obtain privileged access by recovering the cleartext of this password...
Ubuntu Update for Linux kernel vulnerabilities USN-947-1
Ubuntu Update for Linux kernel vulnerabilities USN-947-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9471.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Linux kernel vulnerabilities USN-947-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
CVE-2010-0595
The CVE-2010-0595 case concerns Cisco Network Building Mediator (NBM) and Richards‑Zeta Mediator 2500, where default administrative credentials exist across multiple predefined accounts. According to Cisco’s advisory, vulnerable Mediator Framework releases include 1.5.x, 2.2.x, and 3.0.x prior to...
CVE-2010-0595: Undefined Security Weakness
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...
PHF CGI Program Remote Command Execution (CVE-1999-0067)
There exists a vulnerability in the sample cgi bin program, PHF, which is included with NCSA httpd, and Apache 1.0.3, an NCSA derivitive. By supplying certain characters with special meaning to the shell, arbitrary commands can be executed by remote users. In case of a successful attack, a remote...
Default credentials
The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 has a default administrative password aka SAPassword of W2402, which makes it easier for remote attackers to obtain privileged access...
CVE-2010-2082: Undefined Security Weakness
The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 has a default administrative password aka SAPassword of W2402, which makes it easier for remote attackers to obtain privileged access...
Default credentials
The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access...
CVE-2009-4770
The CVE-2009-4770 entry affects httpdx FTP server component versions 1.4, 1.4.5, 1.4.6, 1.4.6b and 1.5, where a default moderator password (pass123) enables remote attackers to obtain privileged access. The accompanying sources in the connected set confirm the exact default credential outcome but...
CVE-2009-4770: Undefined Security Weakness
The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access...
CVE-2009-3739
Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors...
CVE-2009-3739
The CVE-2009-3739 entry applies to Rockwell Automation Allen-Bradley MicroLogix 1100 and MicroLogix 1400 controllers. Public sources describe multiple vulnerabilities that could allow remote attackers to obtain privileged access or cause a denial of service, via unspecified vectors. Reported impa...
CVE-2009-3739: Undefined Security Weakness
Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors...
CVE-2009-4150
CVE-2009-4150 describes a local vulnerability in IBM DB2 where the component/function dasauto can be exploited by unprivileged user accounts to achieve code execution on affected versions (DB2 8 before FP18; 9.1 before FP8; 9.5 before FP4; 9.7 before FP1). The impact is unspecified in the provide...
EMC AlphaStor Agent Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'EMC AlphaStor Age...
FutureSoft TFTP Server 2000 Transfer-Mode Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'FutureSoft...
Microsoft IIS 4.0 .HTR Path Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft II...
MaxDB WebDBM Database Parameter Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MaxDB WebDBM...
CVE-2008-7102
DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation...