Lucene search
+L

5923 matches found

Cvelist
Cvelist
•added 2026/10/08 7:07 p.m.•41 views

CVE-2026-84250 IBM Guardium Data Protection Hard-coded Credentials

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges...

8.4CVSS0.00094EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 7:07 p.m.•15 views

CVE-2026-84250

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key within the pkcrypto passkey component. A local attacker could exploit this flaw to recover the root password , potentially leading to the acquisition of root privileges . No specific...

8.4CVSS5.9AI score0.00094EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/08 3:49 p.m.•6 views

Security Bulletin: Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection (CVE-2026-84891)

Summary Security vulnerability has been addressed in the Windows GIM component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-84891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of hard-coded...

7.5CVSS5.9AI score0.00303EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/10/08 3:16 a.m.•20 views

CVE-2026-92861

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application...

5.1CVSS0.0011EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/08 2:53 a.m.•23 views

CVE-2026-92861

The Android application Ticket Ryutsu Center contains hard-coded credentials . This security flaw may allow an attacker to obtain an API key used by the application. No specific exploit information or remediation steps are provided in the documents.

5.1CVSS5.4AI score0.0011EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/08 2:53 a.m.•45 views

CVE-2026-92861

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application...

5.1CVSS0.0011EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/08 2:53 a.m.•13 views

EUVD-2026-94675

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application...

5.1CVSS5.4AI score0.0011EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•6 views

CVE-2026-85422: Use of Hard-coded Credentials

A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored managemen...

8.4CVSS7.9AI score0.001EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•3 views

CVE-2026-85488: Use of Hard-coded Credentials

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...

7.8CVSS7.8AI score0.00093EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•16 views

PT-2026-107786

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application...

5.1CVSS5.4AI score0.0011EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•4 views

CVE-2026-84891: Use of Hard-coded Credentials

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials...

7.5CVSS5.9AI score0.00303EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•14 views

PT-2026-107591

Name of the Vulnerable Software and Affected Versions Homer versions prior to 11.0.283 Description In fresh deployments using internal authentication, the bootstrap process automatically creates an admin account with a hard-coded password sipcapture. This password is stored as a legacy SHA-256 he...

9.8CVSS5.8AI score0.00653EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•8 views

CVE-2026-62252: Use of Hard-coded Credentials

Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an admin account with the password sipcapture stored as a legacy SHA-256 hex hash. There is no first-login...

9.8CVSS5.8AI score0.00653EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/06 3:17 p.m.•9 views

CVE-2026-54472

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8...

7.5CVSS6AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2026/10/06 3:17 p.m.•6 views

CVE-2026-61421

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

9.8CVSS6AI score
SaveExploits0References1
NVD
NVD
•added 2026/10/06 3:17 p.m.•19 views

CVE-2026-61421

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

9.8CVSS0.00344EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 3:17 p.m.•17 views

CVE-2026-54472

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8...

9.8CVSS0.00509EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 2:57 p.m.•44 views

CVE-2026-61421

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Use of Hard-coded Cryptographic Key (CWE-798) in the karavi-authorization component's JWT authentication. An unauthenticated remote attacker who knows the publicly available signing secret can forge authentication t...

9.8CVSS6.1AI score0.00344EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/10/06 2:57 p.m.•38 views

CVE-2026-61421

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

9.8CVSS0.00344EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 2:57 p.m.•12 views

EUVD-2026-93437

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

9.8CVSS6.1AI score0.00344EPSS
SaveExploits0References1
Rows per page
Query Builder