NA - CVE-2024-41685 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the router's web management interface. An attacker with...
NA - CVE-2024-41686 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to...
NA - CVE-2024-41687 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within...
NA - CVE-2024-41688 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due lack of encryption in storing of usernames and passwords within the router's firmware/ database. An attacker with physical...
NA - CVE-2024-41689 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access...
NA - CVE-2024-41690 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of default username and password credentials in plaintext within the router's firmware/ database. An attacker...
NA - CVE-2024-41691 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of FTP credentials in plaintext within the SquashFS-root filesystem associated with the router's firmware. An...
NA - CVE-2024-7062 - Nimble Commander suffers from a privilege...
Nimble Commander suffers from a privilege escalation vulnerability due to the server (info.filesmanager.Files.PrivilegedIOHelperV2) performing improper/insufficient validation of a client’s...
NA - CVE-2024-41692 - This vulnerability exists in SyroTech...
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could...
NA - CVE-2023-49921 - An issue was discovered by Elastic whereby...
An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be...