CVE-2025-59704

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password...

FortiPresence - Unpassworded remotely accessible Redis & MongoDB

A missing authentication for critical function vulnerability CWE-306 in FortiPresence on-prem infrastructure server may allow a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests...

CVE-2021-27856

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and no password. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this vulnerability is FPSA002...

IBM InfoSphere Data Replication Dashboard Unpassworded User Enumeration

The version of IBM InfoSphere Data Replication Dashboard hosted on the remote web server displays its list of users that can authenticate without using a password. A remote, unauthenticated attacker could use this information to gain unauthorized access to the application. %NASLMINLEVEL 70300 C...

Unpassworded 'r00t' account

The account 'r00t' on the remote host has no password. An attacker may leverage this issue to gain access to the affected system and launch further attacks against it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "r00t"; include'deprecatednasllevel.inc'; include'compat.inc'; if...

Desktop Orbiter Unpassworded Access Remote Reboot DoS

The remote host is running a Desktop Orbiter Satellite As this service is unpassworded, an attacker may connect to it to reboot the remote host or take administrative control over it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11713; scriptversion"$Revision: 1.14...

Unpassworded 'root' Account

The account 'root' has no password set. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11245; scriptversion"1.32"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/04/11";...

Unpassworded 'lp' Account

The account 'lp' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "lp"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11246; scriptversion"1.36";...

Unpassworded 'jill' Account

The account 'jill' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "jill"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11266; scriptversion"1.34";...

Unpassworded 'jack' Account

The account 'jack' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "jack"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11249; scriptversion"1.35";...

Unpassworded 'date' Account

The account 'date' has no password set. An attacker can leverage this to gain access to the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11248; scriptversion"1.37";...

Unpassworded 'demos' Account

The account 'demos' has no password set. An attacker may use this account to gain further privileges on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "demos"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11242; scriptversion"1.35";...

Unpassworded 'tutor' Account

The account 'tutor' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "tutor"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11251; scriptversion"1.34";...

Unpassworded '4Dgifts' Account

The account '4Dgifts' has no password set. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11243; scriptversion"1.37";...

Unpassworded 'toor' Account

The account 'toor' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "toor"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11252; scriptversion"1.35";...

Unpassworded 'hax0r' Account

The account 'hax0r' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "hax0r"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11253; scriptversion"1.36";...

Unpassworded 'StoogR' Account

The account 'StoogR' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "StoogR"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11259; scriptversion"1.35";...

Zaurus PDA FTP Server Unpassworded root Account

The remote Zaurus FTP server can be accessed as the user 'root' with no password. An attacker may use this flaw to steal or modify the content of your PDA, including but not limited to your address book, personal files, and list of appointments. C Tenable Network Security, Inc. Script audit and...

Cisco Multiple Devices Unpassworded Account

The remote host appears to be a Cisco router or switch with no password set. This can allow a remote attacker to login to the device and take control of it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10754; scriptcveid"CVE-1999-0508"; scriptversion "1.23";...

Nortel Networks Router Unpassworded Account (manager Level)

The remote Nortel Networks former Bay Networks router has no password for the manager account. An attacker could telnet to the router and reconfigure it to lock you out of it. This could prevent you from using your Internet connection. This script was written by Victor Kirhenshtein Based on...