Archive
10 February 2021
Vulnerabilities first published on this day (UTC), newest first.
114 results · Feed
-
Unscored —CVE-2021-27155 EPSS 21%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 3UJU…
-
Unscored —CVE-2021-27156 EPSS 15%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains credentials for an ISP tha…
-
Unscored —CVE-2021-27157 EPSS 15%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 8888…
-
Unscored —CVE-2021-27158 EPSS 24%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded L1vt1m4eng /…
-
Unscored —CVE-2021-27159 EPSS 23%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded useradmin / …
-
Unscored —CVE-2021-27160 EPSS 17%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / 88888…
-
Unscored —CVE-2021-27161 EPSS 17%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 1234…
-
Unscored —CVE-2021-27162 EPSS 28%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / tatto…
-
Unscored —CVE-2021-27163 EPSS 23%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / tele…
-
Unscored —CVE-2021-27164 EPSS 24%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / aisa…
-
Unscored —CVE-2021-27165 EPSS 20%
An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused wit…
-
Unscored —CVE-2021-27166 EPSS 20%
An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon.
-
Unscored —CVE-2021-27167 EPSS 15%
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a password of four hexadecimal characters…
-
Unscored —CVE-2021-27168 EPSS 20%
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a 6GFJdY4aAuUKJjdtSn7d password for the r…
-
Unscored —CVE-2021-27169 EPSS 20%
An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631. There is a gepon password for the gepon…
-
Unscored —CVE-2021-27170 EPSS 16%
An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 c…
-
Unscored —CVE-2021-27171 EPSS 18%
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on…
-
Unscored —CVE-2021-27172 EPSS 20%
An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined ins…
-
Unscored —CVE-2021-27173 EPSS 13%
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC)…
-
Unscored —CVE-2021-27174 EPSS 19%
An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 p…
-
Unscored —CVE-2021-27175 EPSS 18%
An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 pe…
-
Unscored —CVE-2021-27176 EPSS 19%
An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 pe…
-
Unscored —
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending…
-
Unscored —CVE-2021-27178 EPSS 18%
An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in cleartext in nvram.
-
Unscored —CVE-2021-27179 EPSS 14%
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sendi…
-
Medium 6.3
File System Bounds Escape
ftp-srv is an open-source FTP server designed to be simple yet configurable. In ftp-srv before version 4.4.0 there is a path-traversal vulnerability. Clients of FTP servers utilizing ftp-srv hosted on Windows machines can escape the FTP user's defined root fo…
-
Unscored —
An information disclosure issue exists in henriquedornas 5.2.17 because an attacker can dump phpMyAdmin SQL content. NO…
-
Unscored —
A stored XSS issue exists in henriquedornas 5.2.17 via online live chat. NOTE: Third parties report that no such produc…
-
Unscored —
The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allo…
-
Critical 9.1
Prisma Cloud Compute: SAML Authentication Bypass Vulnerability in Console
An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud…
-
High 8.2
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack …
-
High 7.5
IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause t…
-
High 8.8
In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted document can cause the …
-
Unscored —CVE-2021-0325 Public exploit
In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow.…
-
Unscored —CVE-2021-0326 Public exploit
In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lea…
-
Unscored —CVE-2021-0327 Public exploit
In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored bin…
-
Unscored —CVE-2021-0328 Public exploit
In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan resu…
-
High 7.5
Square OkHttp can accept the wrong certificate
In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction…
-
Unscored —CVE-2021-0329 Public exploit
In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing b…
-
Unscored —CVE-2021-0314 Public exploit
In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a …