Lucene search
+L

1801 matches found

osv_ghsa
osv_ghsa
•added 2023/11/03 12:30 a.m.•41 views

GHSA-XR8C-MQ5X-5F56 Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token...

7.5CVSS9.2AI score0.00681EPSS
SaveExploits0References4
NVD
NVD
•added 2023/11/02 10:15 p.m.•49 views

CVE-2023-31579

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token...

9.8CVSS9.2AI score0.00681EPSS
SaveExploits0References2
Prion
Prion
•added 2023/11/02 10:15 p.m.•71 views

Hardcoded credentials

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token...

7.5CVSS9.2AI score0.00681EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/02 12:00 a.m.•15 views

CVE-2023-31579

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token...

6.9AI score0.00681EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/11/02 12:00 a.m.•29 views

CVE-2023-31579

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token...

7.2AI score
SaveExploits0References4
Mend
Mend
•added 2023/11/02 12:00 a.m.•4 views

CVE-2023-31579

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token...

9.8CVSS0.00681EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/02 12:00 a.m.•5 views

CVE-2023-31579: Use of Hard-coded Credentials

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token...

9.8CVSS8.1AI score0.00681EPSS
SaveExploits0References2
CVE
CVE
•added 2023/11/02 12:00 a.m.•104 views

CVE-2023-31579

The CVE-2023-31579 issue affects Dromara Lamp-Cloud prior to v3.8.1, where a hardcoded cryptographic key is used when creating and verifying JSON Web Tokens. This root cause enables attackers to authenticate to the application via specially crafted JWT tokens, as documented across multiple source...

9.8CVSS9.2AI score0.00681EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/11/02 12:00 a.m.•60 views

CVE-2023-31579

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token...

9.5AI score0.00681EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/30 12:00 a.m.•4 views

CVE-2023-46129: Use of Hard-coded Cryptographic Key

NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The cryptographic key handling library, nkeys, recently gained support for encryption, not just for signing/authentication. This is used in nats-server...

7.5CVSS7.1AI score0.00371EPSS
SaveExploits0References3
NVD
NVD
•added 2023/10/25 6:17 p.m.•47 views

CVE-2023-42492

EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key...

9.8CVSS7.7AI score0.00425EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/25 2:42 p.m.•64 views

CVE-2023-42492

CVE-2023-42492 affects EisBaer Scada with a hard-coded cryptographic key (CWE-321). The root cause is use of a hard-coded key within the software, enabling potential disclosure or tampering of protected data. NVD lists a high/severe impact (Confidentiality, Integrity, Availability at high/critica...

9.8CVSS7.7AI score0.00425EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/25 2:42 p.m.•19 views

CVE-2023-42492 EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key

EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key...

7.1CVSS7.3AI score0.00425EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/25 2:42 p.m.•40 views

CVE-2023-42492 EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key

EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key...

7.1CVSS9.8AI score0.00425EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/25 12:00 a.m.•6 views

CVE-2023-42492: Use of Hard-coded Cryptographic Key

EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key...

9.8CVSS7.5AI score0.00425EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/10/19 9:15 p.m.•7 views

CVE-2023-30132

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

7.8CVSS7.1AI score0.00169EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/10/19 9:15 p.m.•21 views

CVE-2023-30132

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

7.8CVSS5.8AI score0.00169EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/19 9:15 p.m.•37 views

CVE-2023-30132

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

7.8CVSS7.8AI score0.00169EPSS
SaveExploits1References1
Prion
Prion
•added 2023/10/19 9:15 p.m.•28 views

Design/Logic Flaw

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

4.3CVSS7.7AI score0.00169EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/10/19 12:00 a.m.•35 views

CVE-2023-30132

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

8AI score0.00169EPSS
SaveExploits1References1
Rows per page
Query Builder