Lucene search
+L

8294 matches found

Vulnrichment
Vulnrichment
added 2023/01/01 8:35 a.m.10 views

CVE-2014-125030 taoeffect Empress hard-coded password

A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected by this issue is some unknown functionality. The manipulation leads to use of hard-coded password. The patch is identified as 557e177d8a309d6f0f26de46efb38d43e000852d. It is recommended to apply a pat...

6.3CVSS6.9AI score0.00876EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/01/01 12:0 a.m.8 views

PT-2023-10100 · Unknown · Taoeffect Empress

Name of the Vulnerable Software and Affected Versions: taoeffect Empress affected versions not specified Description: A critical issue has been found in taoeffect Empress, affecting some unknown functionality. The manipulation leads to the use of a hard-coded password. Recommendations: To fix thi...

9.8CVSS7AI score0.00876EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/01/01 12:0 a.m.13 views

Empress 信任管理问题漏洞

Empress is a lightweight branch of Sovereign focused on email by Greg Slepak, an individual developer. Empress is vulnerable to a trust management issue. An attacker exploits the vulnerability to cause victims to use hard-coded passwords...

9.8CVSS7AI score0.00876EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/12/28 12:0 a.m.4 views

Elvexys ISOS 信任管理问题漏洞

Elvexys ISOS is an application from Elvexys, Inc. A security vulnerability exists in Elvexys ISOS versions 1.81 through 2.00, which stems from hard-coded credentials containing the embedded StreamX installer...

7.8CVSS7.3AI score0.0015EPSS
SaveExploits0References3
NVD
NVD
added 2022/12/27 6:15 p.m.20 views

CVE-2022-45425

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability...

7.5CVSS0.0053EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/27 6:15 p.m.10 views

CVE-2022-45425

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability...

7.5CVSS5.8AI score0.0053EPSS
SaveExploits0References1
CVE
CVE
added 2022/12/27 12:0 a.m.100 views

CVE-2022-45425

Affected software: Dahua software products. Issue: use of a hard-coded AES cryptographic key, enabling an attacker to obtain the AES key. Root cause cited across sources is hard-coded keys within the product set. Impact (per sources): confidentiality impact, high. Vector: network-based exploitati...

7.5CVSS7.5AI score0.0053EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.14 views

Dahua software products 信任管理问题漏洞

Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in a number of Dahua software products that stems from their use of hard-coded encryption keys that allow an attacker to obtain AES encryption keys...

7.5CVSS7.3AI score0.0053EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/12/27 12:0 a.m.26 views

CVE-2022-45425

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability...

7.7AI score0.0053EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/12/27 12:0 a.m.10 views

CVE-2022-45425

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability...

6.9AI score0.0053EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2022/12/22 12:2 p.m.68 views

Critical Security Flaw Reported in Passwordstate Enterprise Password Manager

Multiple high-severity vulnerabilities have been disclosed in Passwordstate password management solution that could be exploited by an unauthenticated remote adversary to obtain a user's plaintext passwords. "Successful exploitation allows an unauthenticated attacker to exfiltrate passwords from ...

1.5AI score0.00968EPSS
SaveExploits3
OSV
OSV
added 2022/12/19 3:15 p.m.10 views

CVE-2022-4611

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS5AI score0.01225EPSS
SaveExploits2References3
ATTACKERKB
ATTACKERKB
added 2022/12/19 3:15 p.m.4 views

CVE-2022-4611

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS5AI score0.01225EPSS
SaveExploits2References4
NVD
NVD
added 2022/12/19 3:15 p.m.30 views

CVE-2022-4611

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS0.01225EPSS
SaveExploits2References3
CVE
CVE
added 2022/12/19 12:0 a.m.70 views

CVE-2022-4611

CVE-2022-4611 affects Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Vulnerability details in the provided documents indicate a manipulation that results in hard-coded credentials in an unspecified part of the product, with remote initiation possible and public disclosure...

5.3CVSS4.9AI score0.01225EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2022/12/19 12:0 a.m.37 views

CVE-2022-4611 Click Studios Passwordstate hard-coded credentials

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

4.3CVSS5.6AI score0.01225EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2022/12/19 12:0 a.m.10 views

PT-2022-27741 · Click Studios · Click Studios Passwordstate +1

Name of the Vulnerable Software and Affected Versions: Click Studios Passwordstate affected versions not specified Click Studios Passwordstate Browser Extension Chrome affected versions not specified Description: A problematic vulnerability was found in Click Studios Passwordstate and Passwordsta...

5.3CVSS6.9AI score0.01225EPSS
SaveExploits2References7
EUVD
EUVD
added 2022/12/19 12:0 a.m.8 views

EUVD-2022-51942

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS7.1AI score0.01225EPSS
SaveExploits2References3
Zero Science Lab
Zero Science Lab
added 2022/12/14 12:0 a.m.221 views

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x (sound4server) Hardcoded Credentials

Summary The SOUND4 IMPACT introduces an innovative process - mono and stereo parts of the signal are processed separately to obtain perfect consistency in terms of both sound and level. Therefore, in moving reception, when the FM receiver switches from stereo to mono and back to stereo, the sound...

9.8CVSS5.8AI score0.00532EPSS
SaveExploits2
OSV
OSV
added 2022/12/13 10:15 p.m.6 views

CVE-2022-2660

Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine...

7.5CVSS5.8AI score0.00616EPSS
SaveExploits0References1
Rows per page
Query Builder