Lucene search
K

8062 matches found

RedhatCVE
RedhatCVE
added 2026/01/21 6:33 a.m.8 views

CVE-2026-1221

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware...

9.8CVSS5.5AI score0.00436EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/21 12:31 a.m.3 views

EUVD-2025-206311

The use of a hard-coded encryption key in calls to the Password function in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows a local attacker to decrypt database credentials by reading the cryptographic key from the executable. This issue affects ImageDirector Capture: from...

8.5CVSS5.4AI score0.00065EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/21 12:31 a.m.4 views

EUVD-2025-206307

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key. This issue affects ImageDirector Capture: from...

6.9CVSS5.3AI score0.0013EPSS
Exploits0References2
OSV
OSV
added 2026/01/20 10:15 p.m.1 views

CVE-2025-58744

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key. This issue affects ImageDirector Capture: from...

7.5CVSS5.8AI score0.0013EPSS
Exploits0References1
OSV
OSV
added 2026/01/20 10:15 p.m.4 views

CVE-2025-58740

The use of a hard-coded encryption key in calls to the Password function in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows a local attacker to decrypt database credentials by reading the cryptographic key from the executable. This issue affects ImageDirector Capture: from...

5.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2026/01/20 10:15 p.m.4 views

CVE-2025-58740

The use of a hard-coded encryption key in calls to the Password function in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows a local attacker to decrypt database credentials by reading the cryptographic key from the executable. This issue affects ImageDirector Capture: from...

8.5CVSS0.00065EPSS
Exploits0References1
NVD
NVD
added 2026/01/20 10:15 p.m.3 views

CVE-2025-58744

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key. This issue affects ImageDirector Capture: from...

7.5CVSS0.0013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/20 9:38 p.m.2 views

CVE-2025-58744 Hard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector Capture

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key. This issue affects ImageDirector Capture: from...

6.9CVSS5.3AI score0.0013EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/20 9:38 p.m.2 views

CVE-2025-58744

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key. This issue affects ImageDirector Capture: from...

7.5CVSS5.3AI score0.0013EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/20 9:38 p.m.13 views

CVE-2025-58744 Hard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector Capture

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key. This issue affects ImageDirector Capture: from...

6.9CVSS0.0013EPSS
Exploits0References1
CVE
CVE
added 2026/01/20 9:38 p.m.8 views

CVE-2025-58744

Milner ImageDirector Capture (Windows) is affected by CVE-2025-58744 due to hard-coded credentials in C2SGlobalSettings.dll. The flaw allows decryption of document archive files using credentials embedded in the application encryption key, affecting versions 7.0.9.0 through 7.6.3.25808. Root caus...

7.5CVSS5.3AI score0.0013EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/20 9:36 p.m.2 views

CVE-2025-58740

The use of a hard-coded encryption key in calls to the Password function in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows a local attacker to decrypt database credentials by reading the cryptographic key from the executable. This issue affects ImageDirector Capture: from...

8.5CVSS5.4AI score0.00065EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/20 9:36 p.m.2 views

CVE-2025-58740 Hardcoded Encryption Key Enables Database Credential Access in Milner ImageDirector Capture

The use of a hard-coded encryption key in calls to the Password function in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows a local attacker to decrypt database credentials by reading the cryptographic key from the executable. This issue affects ImageDirector Capture: from...

8.5CVSS5.4AI score0.00065EPSS
Exploits0References1
NVD
NVD
added 2026/01/20 8:16 p.m.5 views

CVE-2026-0622

Open 5GS WebUI uses a hard-coded JWT signing key change-me whenever the environment variable JWTSECRETKEY is unset...

6.5CVSS0.00408EPSS
Exploits0References4
OSV
OSV
added 2026/01/20 8:16 p.m.4 views

CVE-2026-0622

Open 5GS WebUI uses a hard-coded JWT signing key change-me whenever the environment variable JWTSECRETKEY is unset...

6.5CVSS5.3AI score
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/20 7:56 p.m.1 views

CVE-2026-0622

Open 5GS WebUI uses a hard-coded JWT signing key change-me whenever the environment variable JWTSECRETKEY is unset...

6.5CVSS5.3AI score0.00408EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/20 7:56 p.m.4 views

CVE-2026-0622 Open 5GS WebUI uses a hard-coded JWT signing key

Open 5GS WebUI uses a hard-coded JWT signing key change-me whenever the environment variable JWTSECRETKEY is unset...

5.4AI score0.00408EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/20 7:56 p.m.15 views

CVE-2026-0622 Open 5GS WebUI uses a hard-coded JWT signing key

Open 5GS WebUI uses a hard-coded JWT signing key change-me whenever the environment variable JWTSECRETKEY is unset...

0.00408EPSS
Exploits0References3
CVE
CVE
added 2026/01/20 7:56 p.m.20 views

CVE-2026-0622

Open5GS WebUI is affected by CVE-2026-0622: by default it uses hard-coded JWT signing keys (the string change-me) when JWT_SECRET_KEY is unset, allowing an unauthenticated network attacker to forge JWTs and gain access to protected WebUI endpoints (notably under /api/db/*). The issue arises from ...

6.5CVSS5.4AI score0.00408EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2026/01/20 3:16 p.m.4 views

CVE-2025-14115

IBM Sterling Connect:Direct for UNIX Container 6.3.0.0 through 6.3.0.6 Interim Fix 016, and 6.4.0.0 through 6.4.0.3 Interim Fix 019 IBM® Sterling Connect:Direct for UNIX contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,...

8.4CVSS0.001EPSS
Exploits0References1
Rows per page
Query Builder