Skip to content
Noroxi

CWE-255 · 745 records

Credentials Management Errors

CVEs in this class

745 records

  • CVE-2014-1812
    84Now

    The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, a

    HighCVSS 8.8KEVWeaponizedEPSS 64%

    microsoft · windows 7May 14, 2014

  • CVE-2010-0219
    67This week

    Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default pass

    CriticalCVSS 10.0WeaponizedEPSS 90%

    apache · axis2Oct 18, 2010

  • CVE-2009-4189
    64This week

    HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code

    CriticalCVSS 10.0WeaponizedEPSS 78%

    hp · operations managerDec 3, 2009

  • CVE-2017-8229
    61This week

    Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials.

    CriticalCVSS 9.8Proof of conceptEPSS 74%

    amcrest · ipm-721s firmwareJul 3, 2019

  • CVE-2009-4188
    61This week

    HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary

    CriticalCVSS 10.0WeaponizedEPSS 69%

    hp · operations dashboardDec 3, 2009

  • CVE-2009-3548
    54Plan

    The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default passw

    HighCVSS 7.5WeaponizedEPSS 78%

    apache · tomcatNov 12, 2009

  • CVE-2013-4786
    54Plan

    The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain

    HighCVSS 7.5WeaponizedEPSS 78%

    oracle · fujitsu m10 firmwareJul 8, 2013

  • CVE-2009-1930
    52Plan

    The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 al

    CriticalCVSS 10.0No exploitEPSS 41%

    microsoft · windows 2000Aug 12, 2009

  • CVE-2012-1493
    50Plan

    F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manage

    HighCVSS 7.8WeaponizedEPSS 63%

    f5 · big-ip application security managerJul 9, 2012

  • CVE-2016-7456
    49Plan

    VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for rem

    CriticalCVSS 9.8WeaponizedEPSS 32%

    vmware · vsphere data protectionDec 29, 2016

  • CVE-2010-0557
    46Plan

    IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leve

    HighCVSS 7.5WeaponizedEPSS 51%

    ibm · cognos expressFeb 5, 2010

  • CVE-2008-3009
    45Plan

    Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly

    CriticalCVSS 10.0No exploitEPSS 15%

    microsoft · windows media playerDec 10, 2008

  • CVE-2004-2532
    45Plan

    Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    solarwinds · serv-u file serverDec 31, 2004

  • CVE-2012-4933
    44Plan

    The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard

    HighCVSS 7.8WeaponizedEPSS 44%

    novell · zenworks asset managementOct 20, 2012

  • CVE-2011-0354
    44Plan

    The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    cisco · tandberg endpointFeb 3, 2011

  • CVE-2014-1849
    44Plan

    Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdo

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    foscam · ip camera firmwareMay 13, 2014

  • CVE-2016-6599
    43Plan

    BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010.

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    bmc · track-it\!Jan 30, 2018

  • CVE-2014-8656
    43Plan

    The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a default password of (

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    compal broadband networks · firmwareNov 6, 2014

  • CVE-2014-0683
    43Plan

    The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    cisco · rv110w firmwareMar 6, 2014

  • CVE-2013-3612
    43Plan

    Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    dahuasecurity · dvr0404hd-aSep 17, 2013

  • CVE-2013-6884
    43Plan

    The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allo

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    cru-inc · ditto forensic fieldstation firmwareJan 7, 2014

  • CVE-2011-0885
    43Plan

    A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    smc networks · smcd3g-ccrFeb 8, 2011

  • CVE-2010-4233
    43Plan

    The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a defa

    CriticalCVSS 10.0Proof of conceptEPSS 9%

    camtron · cmnc-200 firmwareNov 16, 2010

  • CVE-2010-0444
    43Plan

    HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to

    CriticalCVSS 10.0No exploitEPSS 8%

    hp · operations agentFeb 9, 2010

  • CVE-2009-3710
    43Plan

    RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, which allows remot

    CriticalCVSS 10.0Proof of conceptEPSS 8%

    riorey · riosOct 16, 2009

All vulnerability classes