Lucene search
+L

4832 matches found

OSV
OSV
added 2024/02/09 11:15 p.m.11 views

CVE-2024-1404

A vulnerability was found in Linksys WRT54GL 4.30.18 and classified as problematic. Affected by this issue is some unknown functionality of the file /SysInfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the publ...

7.5CVSS4.6AI score0.00771EPSS
SaveExploits0References3
NVD
NVD
added 2024/02/09 11:15 p.m.20 views

CVE-2024-1404

A vulnerability was found in Linksys WRT54GL 4.30.18 and classified as problematic. Affected by this issue is some unknown functionality of the file /SysInfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the publ...

7.5CVSS5.1AI score0.00771EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/09 11:15 p.m.27 views

Design/Logic Flaw

A vulnerability was found in Linksys WRT54GL 4.30.18 and classified as problematic. Affected by this issue is some unknown functionality of the file /SysInfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the publ...

3.3CVSS6.6AI score0.00771EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2024/02/09 10:31 p.m.194 views

CVE-2024-1404

CVE-2024-1404 affects Linksys WRT54GL Web Management Interface (SysInfo.htm). The issue is an information disclosure due to manipulation of an unknown functionality in SysInfo.htm. Descriptions across sources confirm the vulnerability in firmware 4.30.18 and that the exploit has been disclosed pu...

7.5CVSS7.3AI score0.00771EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/09 10:31 p.m.10 views

CVE-2024-1404 Linksys WRT54GL Web Management Interface SysInfo.htm information disclosure

A vulnerability was found in Linksys WRT54GL 4.30.18 and classified as problematic. Affected by this issue is some unknown functionality of the file /SysInfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the publ...

4.3CVSS7.4AI score0.00771EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/09 10:31 p.m.39 views

CVE-2024-1404 Linksys WRT54GL Web Management Interface SysInfo.htm information disclosure

A vulnerability was found in Linksys WRT54GL 4.30.18 and classified as problematic. Affected by this issue is some unknown functionality of the file /SysInfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the publ...

4.3CVSS7.5AI score0.00771EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/02/07 4:15 p.m.14 views

CVE-2024-20255

A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for th...

8.2CVSS8.3AI score0.00603EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/02/07 12:00 a.m.12 views

PT-2024-1685 · Cisco · Cisco Expressway Series +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series and Cisco TelePresence Video Communication Server affected versions not specified Description: A vulnerability in the SOAP API could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSR...

8.5CVSS7.3AI score0.00603EPSS
SaveExploits0References13
OSV
OSV
added 2024/02/01 10:15 p.m.10 views

CVE-2024-1039

Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...

9.8CVSS5.8AI score0.00719EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/01 10:15 p.m.40 views

CVE-2024-1039

Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...

9.8CVSS9.6AI score0.00719EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/01 10:15 p.m.27 views

Hardcoded credentials

Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...

7.5CVSS7.2AI score0.00719EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/01 9:38 p.m.20 views

CVE-2024-1039 Use of Hard-coded Credentials in Gessler GmbH WEB-MASTER

Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...

9.8CVSS9.4AI score0.00719EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/01 9:38 p.m.70 views

CVE-2024-1039

CVE-2024-1039 – Gessler GmbH WEB-MASTER is a vulnerability in the WEB-MASTER emergency lighting management system (affected version: 7.9) caused by a restoration account that uses weak, hard-coded credentials. An attacker could remotely take control of the device’s web management (CVSS v3.1 base ...

9.8CVSS9.4AI score0.00719EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/01 9:38 p.m.50 views

CVE-2024-1039 Use of Hard-coded Credentials in Gessler GmbH WEB-MASTER

Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...

9.8CVSS9.7AI score0.00719EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/01 12:00 a.m.12 views

Gessler GmbH WEB-MASTER Authorization Issue Vulnerability

Gessler GmbH WEB-MASTER is an emergency lighting management system from Gessler GmbH, Germany. A security vulnerability exists in Gessler GmbH WEB-MASTER version 7.9, which stems from the use of weakly hard-coded credentials to recover accounts, and which could be exploited by an attacker to take...

9.8CVSS6.8AI score0.00719EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/01 12:00 a.m.10 views

PT-2024-16239 · Gessler Gmbh · Web-Master

Name of the Vulnerable Software and Affected Versions: Gessler GmbH WEB-MASTER affected versions not specified Description: The issue concerns a restoration account in Gessler GmbH WEB-MASTER that utilizes weak, hard-coded credentials. If exploited, this could grant an attacker control over the...

9.8CVSS9.2AI score0.00719EPSS
SaveExploits0References7
zdt
zdt
added 2024/01/31 12:00 a.m.246 views

TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account Vulnerability

TELSAT marKoni FM Transmitter version 1.9.5 has a hidden super administrative account factory that has the hardcoded password inokram25 that allows full access to the web management interface configuration. TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account Vendor: TELSAT Srl Product web page:...

7.5AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2024/01/31 12:00 a.m.334 views

TELSAT marKoni FM Transmitter 1.9.5 Backdoor Account

Summary Professional FM transmitters. Description The transmitter has a hidden super administrative account 'factory' that has the hardcoded password 'inokram25' that allows full access to the web management interface configuration. The factory account is not visible in the users page of the...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits1
OSV
OSV
added 2024/01/30 1:15 a.m.16 views

CVE-2023-5372

The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21AAZF.15C0 and NAS542 firmware versions through V5.21ABAG.12C0 could allow an authenticated attacker with administrator privileges to execute some operating system OS commands by sending a crafte...

7.2CVSS7.2AI score0.28472EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/30 1:15 a.m.28 views

CVE-2023-5372

The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21AAZF.15C0 and NAS542 firmware versions through V5.21ABAG.12C0 could allow an authenticated attacker with administrator privileges to execute some operating system OS commands by sending a crafte...

7.2CVSS7.2AI score0.28472EPSS
SaveExploits0References1
Rows per page
Query Builder