Weak Password Vulnerability in Streaming Media Encoder Professional Edition of Hefei Duck Information Technology Co.

Hefei Duck Information Technology Co., Ltd. is a company focusing on the research of audio and video compression, transmission and analysis algorithms. A weak password vulnerability exists in Hefei Tuduck Information Technology Limited Streaming Encoder Professional Edition, which can be exploite...

Weak Password Vulnerability in 360 Skywall's New Generation Intelligent Firewalls

360 Skywall New Generation Intelligent Firewall is a new generation firewall independently developed by NetShen Information Technology Beijing Co. A weak password vulnerability exists in the 360 Tinti New Generation Intelligent Firewall, which can be exploited by attackers to obtain sensitive...

GHSA-GQ67-PP9W-43GP Cryptographically weak CSRF tokens in Apache MyFaces

In the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, and 3.0.0-RC1 use cryptographically weak implicit and explicit cross-site request forgery CSRF tokens. Due to that limitation, it is possible although difficult for an attacker ...

Cryptographically weak CSRF tokens in Apache MyFaces

In the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, and 3.0.0-RC1 use cryptographically weak implicit and explicit cross-site request forgery CSRF tokens. Due to that limitation, it is possible although difficult for an attacker ...

CVE-2021-20566

IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238...

Weak password vulnerability in Hikvision security access gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a leading provider of security products and industry solutions. A weak password vulnerability exists in the Hikvision security access gateway. An attacker can utilize the vulnerability to log into the backend and obtain sensitive information...

Weak password vulnerability in hera task scheduling system

hera Task Scheduler is a distributed task scheduling system based on a rewrite of zeus. A weak password vulnerability exists in hera Task Scheduler, which can be exploited by an attacker to obtain sensitive information...

The vulnerability of the SetWizardConfig function in D-Link DIR-846 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetWizardConfig function in D-Link DIR-846 router microprogramming software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created request /HNAP1/...

Weak Password Vulnerability in DCN DCME Multicore Engine

Digital China Group Corporation focuses on providing you with full-stack cloud services, including cloud management services such as cloud management, cloud resource procurement, and proprietary cloud services, as well as data services such as data desensitization and video cloud for various...

CVE-2021-20566

IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238...

Weak Password Vulnerability in StarNet Intelligence SVG6000 Series Voice Gateway

As the core business unit for intelligent communications under StarNet Ruijie, StarNet Intelligence is a leading provider of converged communications solutions in China. A weak password vulnerability exists in the SVG6000 series voice gateway of Starnet Intelligence. An attacker can use the weak...

Security Bulletin: Multiple vulnerabilities have been identified in IBM® Db2® which is shipped with IBM Operations Analyticsg Predictive Insights

Summary IBM® Db2® is shipped as a component of IBM Operations Analytics Predictive Insights. IBM® Db2® for Linux, UNIX and Windows includes DB2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow caused by improper bounds checking, denial of service atack due to a hang in the S...

Weak Password Vulnerability in EG1000L of Riptide Networks Inc.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the EG1000L of Ruijie Networks Co. An attacker can exploit the vulnerability to log in to the backend of the device and obtain sensitive information...

Weak Password Vulnerability in EG2000P of Ruijie Networks Co.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the EG2000P of Ruijie Networks Co. An attacker can exploit this vulnerability to log into the device backend and obtain sensitive information...

Weak Password Vulnerability in NBR2000D of Riptide Networks Inc.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the NBR2000D of Ruijie Networks Co. An attacker can exploit the vulnerability to log in to the backend of the device and obtain sensitive information...

Weak Password Vulnerability in 1000C of Ruijie Networks Co.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the Ruijie Networks Co. 1000C. An attacker can exploit the vulnerability to log in to the backend of the device and obtain sensitive information...

Weak Password Vulnerability in TRENDnet TV-IP651W

TRENDnet is one of the world's leading data networking specialists, headquartered in Silicon Valley. The TRENDnet TV-IP651W suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Receita Federal IRPF 授权问题漏洞

Receita Federal Imposto de Renda Pessoa Física, a personal income tax application from Receita Federal, Inc. has an authorization problem vulnerability in Receita Federal IRPF that stems from a lack of authentication measures or insufficient authentication strength in the network system or produc...

Weak Password Vulnerability in SG-6000-M2105 by Shanshi Netcom

SG-6000-M2105 is a firewall product of Shanshi Netcom Technology Beijing Co. A weak password vulnerability exists in the SG-6000-M2105, which can be exploited by attackers to obtain sensitive information...

Code injection

In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day...