CWE-521 · 233 записей
Weak Password Requirements
CVE этого класса
233 записей
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
60На этой неделе | CVE-2019-17444Proof of concept | JFrog Artifactory does not enforce default admin password changejfrog · artifactory · CWE-521 | Критическая9,8 | — | 69,4 % | 12 окт. 2020 г. |
59В плане | CVE-2019-18988Готовый эксплойт | TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' inteamviewer · teamviewer · CWE-521 | Высокая7,0 | KEV | 4,7 % | 7 февр. 2020 г. |
41В плане | CVE-2017-3186Эксплойта нет | ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all deacti · camera firmware · CWE-521 | Критическая9,8 | — | 6,0 % | 15 дек. 2017 г. |
40В плане | CVE-2018-1000134Эксплойта нет | UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, wherepingidentity · ldapsdk · CWE-521 | Критическая9,8 | — | 4,6 % | 16 мар. 2018 г. |
40В плане | CVE-2017-12861Эксплойта нет | The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using aepson · easymp · CWE-521 | Критическая9,8 | — | 3,3 % | 10 окт. 2017 г. |
40В плане | CVE-2020-11966Эксплойта нет | In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root password arbitrarily.evenroute · iqrouter firmware · CWE-521 | Критическая9,8 | — | 3,0 % | 21 апр. 2020 г. |
40В плане | CVE-2017-14189Эксплойта нет | An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully logfortinet · fortiweb manager · CWE-521 | Критическая9,8 | — | 2,7 % | 29 нояб. 2017 г. |
40В плане | CVE-2017-7903Эксплойта нет | A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-Lrockwellautomation · 1763-l16awa series a · CWE-521 | Критическая9,8 | — | 2,7 % | 29 июн. 2017 г. |
40В плане | CVE-2020-29591Эксплойта нет | Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user.docker · registry · CWE-521 | Критическая9,8 | — | 2,6 % | 11 дек. 2020 г. |
40В плане | CVE-2020-26201Эксплойта нет | Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level.askey · ap5100w firmware · CWE-521 | Критическая9,8 | — | 2,4 % | 10 дек. 2020 г. |
40В плане | CVE-2017-1601Эксплойта нет | IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passworibm · security guardium database activity monitor · CWE-521 | Критическая9,8 | — | 2,4 % | 2 мая 2018 г. |
40В плане | CVE-2019-9950Эксплойта нет | Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cwesterndigital · my cloud firmware · CWE-521 | Критическая9,8 | — | 2,3 % | 24 апр. 2019 г. |
40В плане | CVE-2022-1775Эксплойта нет | Weak Password Requirements in polonel/trudesktrudesk project · trudesk · CWE-521 | Критическая9,8 | — | 2,2 % | 20 мая 2022 г. |
40В плане | CVE-2022-1668Эксплойта нет | Secheron SEPCOS Control and Protection Relaysecheron · sepcos control and protection relay firmware · CWE-521 | Критическая9,8 | — | 2,2 % | 24 июн. 2022 г. |
40В плане | CVE-2018-1372Эксплойта нет | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have strong passwords by default, which makes itibm · security guardium big data intelligence · CWE-521 | Критическая9,8 | — | 2,1 % | 27 февр. 2018 г. |
40В плане | CVE-2018-19064Эксплойта нет | An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with Sopticam · i5 application firmware · CWE-521 | Критическая9,8 | — | 1,9 % | 7 нояб. 2018 г. |
40В плане | CVE-2021-43036Эксплойта нет | An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.kaseya · unitrends backup · CWE-521 | Критическая9,8 | — | 1,9 % | 6 дек. 2021 г. |
40В плане | CVE-2019-9096Эксплойта нет | An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,moxa · mb3170 firmware · CWE-521 | Критическая9,8 | — | 1,7 % | 11 мар. 2020 г. |
40В плане | CVE-2023-29974Эксплойта нет | An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements.pfsense · pfsense · CWE-521 | Критическая9,8 | — | 1,7 % | 8 нояб. 2023 г. |
40В плане | CVE-2017-9853Эксплойта нет | An issue was discovered in SMA Solar Technology products.sma · sunny boy 3600 firmware · CWE-521 | Критическая9,8 | — | 1,7 % | 5 авг. 2017 г. |
40В плане | CVE-2022-35143Эксплойта нет | Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks.raneto project · raneto · CWE-521 | Критическая9,8 | — | 1,7 % | 4 авг. 2022 г. |
40В плане | CVE-2022-31211Эксплойта нет | An issue was discovered in Infiray IRAY-A8Z3 1.0.957.infiray · iray-a8z3 firmware · CWE-521 | Критическая9,8 | — | 1,7 % | 17 июл. 2022 г. |
40В плане | CVE-2020-8956Готовый эксплойт | Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.pulsesecure · pulse secure desktop · CWE-521 | Низкая3,3 | — | 1,1 % | 27 окт. 2020 г. |
40В плане | CVE-2025-12364Эксплойта нет | Weak Password Policyazure-access · blu-ic2 firmware · CWE-521 | Критическая10,0 | — | 0,3 % | 27 окт. 2025 г. |
39Наблюдать | CVE-2017-1196Эксплойта нет | IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easieribm · bigfix security compliance analytics · CWE-521 | Критическая9,8 | — | 1,6 % | 7 июн. 2017 г. |
- CVE-2019-1744460На этой неделе
JFrog Artifactory does not enforce default admin password change
КритическаяCVSS 9,8Proof of conceptEPSS 69 %jfrog · artifactory12 окт. 2020 г.
- CVE-2019-1898859В плане
TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' in
ВысокаяCVSS 7,0KEVГотовый эксплойтEPSS 4 %teamviewer · teamviewer7 февр. 2020 г.
- CVE-2017-318641В плане
ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default credentials across all de
КритическаяCVSS 9,8Эксплойта нетEPSS 6 %acti · camera firmware15 дек. 2017 г.
- CVE-2018-100013440В плане
UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %pingidentity · ldapsdk16 мар. 2018 г.
- CVE-2017-1286140В плане
The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %epson · easymp10 окт. 2017 г.
- CVE-2020-1196640В плане
In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root password arbitrarily.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %evenroute · iqrouter firmware21 апр. 2020 г.
- CVE-2017-1418940В плане
An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %fortinet · fortiweb manager29 нояб. 2017 г.
- CVE-2017-790340В плане
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %rockwellautomation · 1763-l16awa series a29 июн. 2017 г.
- CVE-2020-2959140В плане
Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %docker · registry11 дек. 2020 г.
- CVE-2020-2620140В плане
Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %askey · ap5100w firmware10 дек. 2020 г.
- CVE-2017-160140В плане
IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwor
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %ibm · security guardium database activity monitor2 мая 2018 г.
- CVE-2019-995040В плане
Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My C
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %westerndigital · my cloud firmware24 апр. 2019 г.
- CVE-2022-177540В плане
Weak Password Requirements in polonel/trudesk
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %trudesk project · trudesk20 мая 2022 г.
- CVE-2022-166840В плане
Secheron SEPCOS Control and Protection Relay
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %secheron · sepcos control and protection relay firmware24 июн. 2022 г.
- CVE-2018-137240В плане
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have strong passwords by default, which makes it
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %ibm · security guardium big data intelligence27 февр. 2018 г.
- CVE-2018-1906440В плане
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with S
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %opticam · i5 application firmware7 нояб. 2018 г.
- CVE-2021-4303640В плане
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %kaseya · unitrends backup6 дек. 2021 г.
- CVE-2019-909640В плане
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %moxa · mb3170 firmware11 мар. 2020 г.
- CVE-2023-2997440В плане
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %pfsense · pfsense8 нояб. 2023 г.
- CVE-2017-985340В плане
An issue was discovered in SMA Solar Technology products.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %sma · sunny boy 3600 firmware5 авг. 2017 г.
- CVE-2022-3514340В плане
Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %raneto project · raneto4 авг. 2022 г.
- CVE-2022-3121140В плане
An issue was discovered in Infiray IRAY-A8Z3 1.0.957.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %infiray · iray-a8z3 firmware17 июл. 2022 г.
- CVE-2020-895640В плане
Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.
НизкаяCVSS 3,3Готовый эксплойтEPSS 1 %pulsesecure · pulse secure desktop27 окт. 2020 г.
- CVE-2025-1236440В плане
Weak Password Policy
КритическаяCVSS 10,0Эксплойта нетEPSS 0 %azure-access · blu-ic2 firmware27 окт. 2025 г.
- CVE-2017-119639Наблюдать
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %ibm · bigfix security compliance analytics7 июн. 2017 г.