VDG Security VDG Sense 2.3.13
Approved changes feed: RSS · Atom
cpe:2.3:a:vdgsecurity:vdg_sense:2.3.13:*:*:*:*:*:*:*part: a version: 2.3.13 update: *
| Vendor | Vdgsecurity (a770b091-aec4-54cc-81a1-d4c568697171) |
|---|---|
| Product | Vdg Sense (09c1ede0-b968-54c0-beda-0e2f9708572a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-9579 |
vulnerable | 2026-06-08 05:06:12.164539 |
Details available
VDG Security SENSE (formerly DIVA) 2.3.13 stores administrator credentials in cleartext, which allows attackers to obtain sensitive information by reading the plugin configuration files.
Published: 2015-01-08T15:00:00.000Z
Updated: 2024-09-16T23:35:35.222Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9578 |
vulnerable | 2026-06-08 05:06:12.164260 |
Details available
VDG Security SENSE (formerly DIVA) 2.3.13 performs authentication with a password hash instead of a password, which allows remote attackers to gain login access by leveraging knowledge of a password hash.
Published: 2015-01-08T15:00:00.000Z
Updated: 2024-08-06T13:47:41.788Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9577 |
vulnerable | 2026-06-08 05:06:12.163961 |
Details available
VDG Security SENSE (formerly DIVA) 2.3.13 sends the user database when a user logs in, which allows remote authenticated users to obtain usernames and password hashes by logging in to TCP port 51410 and reading the response.
Published: 2015-01-08T15:00:00.000Z
Updated: 2024-09-16T23:50:25.923Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9576 |
vulnerable | 2026-06-08 05:06:12.163640 |
Details available
VDG Security SENSE (formerly DIVA) 2.3.13 has a hardcoded password of (1) ArpaRomaWi for the root Postgres account and !DVService for the (2) postgres and (3) NTP Windows user accounts, which allows remote attackers to obtain access.
Published: 2015-01-08T15:00:00.000Z
Updated: 2024-09-17T02:52:56.648Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9452 |
vulnerable | 2026-06-08 05:06:11.807797 |
Details available
Directory traversal vulnerability in VDG Security SENSE (formerly DIVA) 2.3.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the default URI to images/.
Published: 2015-01-02T20:00:00.000Z
Updated: 2024-08-06T13:47:40.318Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9451 |
vulnerable | 2026-06-08 05:06:11.807368 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.