Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,654

Export CSV
CVE-2018-20398

Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Skyworthdigital
Products
Cm5100 Cm5100-440 Cm5100-440 Firmware and 7 more
CVE-2018-20397

mplus CBC383Z CBC383Z_mplus_MDr026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Mplustec
Products
Cbc383z Cbc383z Firmware
CVE-2018-20396

NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Telaum
Products
Ming2120j Ming2120j Firmware Ming6300 and 1 more
CVE-2018-20395

NETWAVE MNG6200 C4835805jrc12FU121413.cpr devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Net-wave
Products
Ming6200 Ming6200 Firmware
CVE-2018-20394

Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Technicolor
Products
Dwg849 Dwg849 Firmware Dwg850-4 and 5 more
CVE-2018-20392

S-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Cisco
Products
Dpc2100 Dpc2100 Firmware
CVE-2018-20391

TEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Teknotel
Products
Cbw700n Cbw700n Firmware
CVE-2018-20390

Kaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Kaonmedia
Products
Cg2001-an22a Cg2001-an22a Firmware Cg2001-udbna and 3 more
CVE-2018-20389

D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 2.0% KEV · Not listed
Vendors
D-link Dlink
Products
Dcm-604 Firmware Dcm-704 Firmware Dcm-604 and 1 more
CVE-2018-20388

Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Comtrend
Products
Cm-6200un Cm-6200un Firmware Cm-6300n and 1 more
CVE-2018-20387

Bnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Bnmux
Products
Bcw700j Bcw700j Firmware Bcw710j and 3 more
CVE-2018-20386

ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Commscope
Products
Arris Sbg6580-2 Arris Sbg6580-2 Firmware
CVE-2018-20385

CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Castlenet
Products
Cbv38z4ec Cbv38z4ec Firmware Cbv38z4ecnit and 5 more
CVE-2018-20384

iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Inovobb
Products
Ib-8120-w21 Ib-8120-w21 Firmware Ib-8120-w21e1 and 1 more
CVE-2018-20382

Jiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Jezetek-intl
Products
Bcm93383wrg Bcm93383wrg Firmware
CVE-2018-20243

The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.

CVSS 3.1 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Apache
Products
Fineract
CVE-2018-1498

IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 141223.

CVSS 3.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm
Products
Security Guardium
CVE-2018-1139

samba: Weak authentication protocol regression

A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.

CVSS 3.1 · 8.1 High EPSS 3.1% KEV · Not listed
Vendors
Canonical Redhat Samba
Products
Ubuntu Linux Enterprise Linux Enterprise Linux Desktop and 4 more