Lucene search
+L

3909 matches found

NVD
NVD
added 2026/01/20 3:16 p.m.12 views

CVE-2025-14115

IBM Sterling Connect:Direct for UNIX Container 6.3.0.0 through 6.3.0.6 Interim Fix 016, and 6.4.0.0 through 6.4.0.3 Interim Fix 019 IBM® Sterling Connect:Direct for UNIX contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,...

8.4CVSS0.001EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/20 2:59 p.m.28 views

CVE-2025-14115 IBM Sterling Connect:Direct for UNIX Container is affected by vulnerability where hard-coded credentials are embeeded in the product for its internal use.

IBM Sterling Connect:Direct for UNIX Container 6.3.0.0 through 6.3.0.6 Interim Fix 016, and 6.4.0.0 through 6.4.0.3 Interim Fix 019 IBM® Sterling Connect:Direct for UNIX contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,...

8.4CVSS0.001EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/20 2:59 p.m.4 views

CVE-2025-14115

IBM Sterling Connect:Direct for UNIX Container 6.3.0.0 through 6.3.0.6 Interim Fix 016, and 6.4.0.0 through 6.4.0.3 Interim Fix 019 IBM® Sterling Connect:Direct for UNIX contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,...

8.4CVSS5.3AI score0.001EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/20 2:59 p.m.5 views

CVE-2025-14115 IBM Sterling Connect:Direct for UNIX Container is affected by vulnerability where hard-coded credentials are embeeded in the product for its internal use.

IBM Sterling Connect:Direct for UNIX Container 6.3.0.0 through 6.3.0.6 Interim Fix 016, and 6.4.0.0 through 6.4.0.3 Interim Fix 019 IBM® Sterling Connect:Direct for UNIX contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,...

8.4CVSS5.4AI score0.001EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/20 2:59 p.m.21 views

CVE-2025-14115

CVE-2025-14115 affects IBM Sterling Connect:Direct for UNIX Container. Concrete details from connected sources: vulnerable versions are 6.3.0.0 to 6.3.0.6_iFix016 and 6.4.0.0 to 6.4.0.3_iFix019. The root cause is hard-coded credentials used for inbound authentication, outbound communication, or i...

8.4CVSS5.4AI score0.001EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/20 7:15 a.m.8 views

CVE-2026-1221

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware...

9.8CVSS0.00436EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/20 6:25 a.m.27 views

CVE-2026-1221 BROWAN COMMUNICATIONS |PrismX MX100 AP controller - Use of Hard-coded Credentials

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware...

9.8CVSS0.00436EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/20 6:25 a.m.5 views

CVE-2026-1221

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware...

9.8CVSS5.4AI score0.00436EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/20 6:25 a.m.37 views

CVE-2026-1221

CVE-2026-1221 concerns the PrismX MX100 AP controller from Browan Communications. Multiple connected sources confirm a vulnerability described as the use of hard-coded credentials stored in firmware, enabling unauthenticated remote login to the database. Reported impact is high on confidentiality...

9.8CVSS5.5AI score0.00436EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/20 6:25 a.m.3 views

CVE-2026-1221 BROWAN COMMUNICATIONS |PrismX MX100 AP controller - Use of Hard-coded Credentials

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware...

9.8CVSS5.5AI score0.00436EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/20 12:0 a.m.9 views

Browan Communications PrismX MX100 Trust Management Vulnerability

The Browan Communications PrismX MX100 is a wireless router produced by Browan Communications in Taiwan, China. The PrismX MX100 has a trust management vulnerability, which stems from the use of hard-coded credentials. This vulnerability could allow unverified remote attackers to log into databas...

9.8CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/20 12:0 a.m.15 views

PT-2026-3669

Name of the Vulnerable Software and Affected Versions Milner ImageDirector Capture versions 7.0.9.0 through 7.6.3.25808 Description A flaw exists in Milner ImageDirector Capture on Windows due to the use of hard-coded application encryption keys within the C2SGlobalSettings.dll component. This...

7.5CVSS5.4AI score0.0013EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/20 12:0 a.m.14 views

PT-2026-3541

Name of the Vulnerable Software and Affected Versions PrismX MX100 AP controller Description The PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a flaw related to the use of hard-coded credentials. This allows unauthenticated remote attackers to gain access to the database using...

9.8CVSS5.4AI score0.00436EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/01/20 12:0 a.m.20 views

PT-2026-3581

IBM Sterling Connect:Direct for UNIX Container 6.3.0.0 through 6.3.0.6 Interim Fix 016, and 6.4.0.0 through 6.4.0.3 Interim Fix 019 IBM® Sterling Connect:Direct for UNIX contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,...

8.4CVSS5.4AI score0.001EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/01/15 2:48 p.m.5 views

Security Bulletin: IBM Sterling Connect:Direct for UNIX Container is affected by vulnerability where hard-coded credentials are embeeded in the product for its internal use.

Summary IBM Sterling Connect:Direct for UNIX Container requires credential for Standard User Mode deployment. This fix removes the hard-coded credentials and uses dynamically generated one during container initialization. Vulnerability Details CVEID:CVE-2025-14115 DESCRIPTION: IBM® Sterling...

8.4CVSS6.8AI score0.001EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/13 10:52 p.m.7 views

CVE-2025-7072

The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text shared across all routers of this model that an unauthenticated remote attacker could use to execute commands with root privileges. This vulnerability has been fixed in firmware version: 1.00.67 for...

9.3CVSS7.6AI score0.00516EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:37 p.m.8 views

CVE-2023-50894

In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information...

8.8CVSS6.9AI score0.00424EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/09 12:15 p.m.10 views

CVE-2025-7072

The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text shared across all routers of this model that an unauthenticated remote attacker could use to execute commands with root privileges. This vulnerability has been fixed in firmware version: 1.00.67 for...

9.3CVSS0.00516EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:28 a.m.8 views

CVE-2021-27437

The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to query Grafana APIs. Authentication is not required for exploitation on the WISE-PaaS/RMM versions prior to...

9.1CVSS6.5AI score0.01242EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:25 a.m.10 views

CVE-2021-28111

Draeger X-Dock Firmware before 03.00.13 has Hard-Coded Credentials, leading to remote code execution by an authenticated attacker...

8.8CVSS8.1AI score0.03102EPSS
SaveExploits0References1
Rows per page
Query Builder