Lucene search
K

8062 matches found

Cvelist
Cvelist
added 2026/04/27 11:40 p.m.27 views

CVE-2026-32644 Milesight Cameras Use of Hard-coded Cryptographic Key

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

9.8CVSS0.00218EPSS
Exploits0References3
CVE
CVE
added 2026/04/27 11:38 p.m.12 views

CVE-2026-27785

CVE-2026-27785 affects specific Milesight AIOT camera firmware versions that contain hard-coded credentials. The vulnerability arises from credentials embedded in the firmware, enabling adjacent attackers with low complexity and no privileges required to access confidentiality, integrity, and ava...

8.8CVSS5.2AI score0.00224EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/27 11:38 p.m.27 views

CVE-2026-27785 Milesight Cameras Use of Hard-coded Credentials

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

8.8CVSS0.00224EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/27 11:38 p.m.2 views

CVE-2026-27785

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

8.8CVSS5.2AI score0.00224EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/27 11:38 p.m.3 views

EUVD-2026-25935

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

8.8CVSS5.1AI score0.00224EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/04/27 7:23 p.m.1 views

CVE-2026-7018

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.2AI score0.00338EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/27 7:59 a.m.2 views

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by denial of service and weaker than expected security vulnerabilities in WebSphere Application Server Liberty

Summary WebSphere Application Server Liberty is used by IBM Operations Analytics - Log Analysis as part of the application security stack and security utility. CVE-2025-14923 and CVE-2024-29371. Vulnerability Details CVEID:CVE-2025-14923 DESCRIPTION: IBM WebSphere Application Server - Liberty...

9.8CVSS5.3AI score0.00244EPSS
Exploits1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.4 views

PT-2026-35544

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

8.8CVSS5.1AI score0.00224EPSS
Exploits0References4
NVD
NVD
added 2026/04/26 4:16 a.m.2 views

CVE-2026-7018

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS0.00338EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/04/26 3:30 a.m.28 views

CVE-2026-7018 Datavane Datavines JWT Token TokenManager.java hard-coded key

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS0.00338EPSS
Exploits0References8
EUVD
EUVD
added 2026/04/26 3:30 a.m.3 views

EUVD-2026-25693

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.3AI score0.00338EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/04/26 3:30 a.m.2 views

CVE-2026-7018

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS4.7AI score0.00338EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2026/04/26 3:30 a.m.2 views

CVE-2026-7018 Datavane Datavines JWT Token TokenManager.java hard-coded key

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.3AI score0.00338EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/04/26 12:0 a.m.2 views

PT-2026-35199

A vulnerability was determined in Datavane Datavines up to 13607645e14a4982468cfdbcf75c85cde63bae71. The affected element is an unknown function of the file datavines-core/src/main/java/io/datavines/core/utils/TokenManager.java of the component JWT Token Handler. Executing a manipulation of the...

6.3CVSS5.2AI score0.00338EPSS
Exploits0References9
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/24 4:22 p.m.5 views

Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub

Summary Multiple vulnerabilities were addressed in IBM Data Product Hub version 5.3.1 Patch 3 Vulnerability Details CVEID:CVE-2025-14923 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected...

9.8CVSS5.9AI score0.00353EPSS
Exploits1Affected Software1
CVE
CVE
added 2026/04/23 11:50 p.m.8 views

CVE-2026-35503

SenseLive X3050 vulnerable via its web management interface: authentication is performed client-side using hardcoded values in browser-executed scripts, enabling an attacker with access to the login page to retrieve exposed parameters and gain unauthorized administrative access. Base scores are C...

9.8CVSS5.7AI score0.00454EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/04/23 11:50 p.m.30 views

CVE-2026-35503 SenseLive X3050 Use of Hard-coded Credentials

A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-executed scripts rather than server-side verification. An attacker with access to the login page could retrieve these...

9.8CVSS0.00454EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/23 11:50 p.m.0 views

CVE-2026-35503 SenseLive X3050 Use of Hard-coded Credentials

A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-executed scripts rather than server-side verification. An attacker with access to the login page could retrieve these...

9.8CVSS5.4AI score0.00454EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/22 4:51 p.m.2 views

Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty (CVE-2024-29371, CVE-2025-14923)

Summary IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty CVE-2024-29371, CVE-2025-14923. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2024-29371 DESCRIPTION: In jose4j before 0.9.6, an attacker can...

9.8CVSS5.7AI score0.00244EPSS
Exploits1Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/04/21 6:27 a.m.3 views

Multiple vulnerabilities in silex technology SD-330AC and AMC Manager

Overview SD-330AC and AMC Manager provided by silex technology, Inc. contain multiple vulnerabilities listed below. Stack-based buffer overflow in processing the redirect URLs CWE-121 - CVE-2026-32955 Heap-based buffer overflow in processing the redirect URLs CWE-122 - CVE-2026-32956 Missing...

9.8CVSS6.9AI score0.40002EPSS
Exploits1References27
Rows per page
Query Builder