CVE-2021-3505

A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with 1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate, which is called before the prime number check. The highest threat...

U.S. General Services Administration: Weak password policy leading to exposure of administrator account access

Hi, The login endpoint https://mysmartplans.gsa.gov/Marathon/Default.aspx is having weak password policy. During the recon, I came across a mysmartplans overview document http://www.accentimaging.com/accent/pdfs/Accent%20MySmartPlans.pdf . In this document few users are mentioned like - rick, ban...

Weak Password Vulnerability in RMP Router Management Platform of Xiamen Sihsin Communication Technology Co.

Xiamen Sihsin Communication Technology Co., Ltd. focuses on the research and development, production, promotion and service of high-end wireless communication transmission equipment in the industrial field, and is a backbone enterprise in the field of wireless communication of the Internet of...

Weak Password Vulnerability in Fusion Router FR3008

Ltd. was founded in 2009, is to provide users with intelligent products and cloud services in the field of smart home technology innovative enterprises Smart Life is Fusion's Internet strategy segment, with intelligent network devices, smart hardware, APP and Internet communication channels as th...

Weak password vulnerability in Tianyue Network Security Audit System V6.0

Tianyue Network Security Audit System Business Network Audit, referred to as Tianyue Audit System, is a compliance management system that conducts fine-grained audits of network operation behaviors in business environments. A weak password vulnerability exists in Tianyue Network Security Audit...

Weak password vulnerability in Qixing Tianqing Hanma USG Firewall (CNVD-2021-32769)

Tianqing Hanma USG Firewall is developed based on Qixing ISE unified engine, there is no OEM from third-party functions, and the functions can be split in any combination, which has very little impact on system performance. Adopting multi-core hardware architecture and integrated software design,...

Weak Password Vulnerability in Apache Ambari

Apache Ambari is a web-based tool that supports provisioning, management and monitoring of Apache Hadoop clusters. Apache Ambari suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in RG-ISG of Ruijie Networks Co.

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A weak password vulnerability exists in the RG-ISG of Ruijie Networks Corporation,...

Weak password vulnerability in H3C s1526 switch

H3C S1526 switch is a Layer 2 wire-speed Ethernet switching product independently developed by H3C Communication Technology Co., Ltd. and is an intelligent switch designed for network environments that require high performance and easy installation. A weak password vulnerability exists in the H3C...

Weak Password Vulnerability in Ruiyou Yilian Remote Access System

Xingtai Zhigong Software Service Center Dingzhi Technology, is a company focusing on the Shenzhou Zhigong series of miniature specialty store management software development services. A weak password vulnerability exists in the Ruiyou Yilian remote access system, which can be exploited by attacke...

Weak Password Vulnerability in Time Refinement Management Platform of Entropy Base Technology Co. Ltd (CNVD-2021-30899)

formerly known as: China Control Intelligence Technology Co., Ltd. was founded in 2007, focusing on the research of hybrid biometrics technology and the application of technology enterprises, is a "people, vehicles, things" based on the entrance and exit time and security management system produc...

Weak password vulnerability in web manager system of Shenzhen Dingxin Tongda Co.

Shenzhen Dingxintongda Co., Ltd. was established in February 23, 2011, the registered office is located in Shenzhen City, Nanshan District, Xili Street, Xili Community, Xingke Street, Vanke Cloud City, a phase of the seven A building 1801 R & D room, 1802 R & D room, 1804 R & D room, the legal...

Weak Password Vulnerability in Various Security Products of Humber Technology Ltd.

Humber Technology Co., Ltd, registered capital of 76,236,500 yuan, business scope: electronic information, software technology development, consulting, services, transfers; computer software, computers and peripheral equipment, culture and office machinery, machinery and equipment, electrical...

TP-LINK TD-W8950N router suffers from weak password vulnerability

hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK TD-W8950N router, which can be exploited by an attacker to log in to the system backend and perform unauthorized operations...

Weak Password Vulnerability in H3C Switch S5120-28P-HPWR-SI Management Platform

Xinhua San Technologies Co., Ltd. has a full range of overall digital infrastructure capabilities in computing, storage, networking, 5G, security, etc., and provides one-stop digital solutions including cloud computing, big data, artificial intelligence, industrial internet, information security,...

Weak Password Vulnerability in D-Link Router Management Page

AUO Electronic Equipment Shanghai Co., Ltd. was established on August 13, 2002. The company's business scope includes routers, network cards, hubs, switches, converters, etc. in the region. A weak password vulnerability exists in the management page of D-Link routers, which can be exploited by...

Weak password vulnerability in Huawei S3700-28TP-SI-AC management platform

Founded in 1987, Huawei is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in Huawei S3700-28TP-SI-AC management platform, which can be exploited by attackers to obtain sensitive information...

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

Weak Password Vulnerability in Optronics Device Management System

LELIGHT is the brand of wireless network series products independently developed by Shenzhen Chaohanghui Network Technology Co. A weak password vulnerability exists in the LELIGHT device management system, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Lenovo.com Security Gateway

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and was formerly known as the Information Security Division of Lenovo Group. Its main business covers network border security protection, application and data security protection, and...