Lucene search
+L

3912 matches found

OSV
OSV
added 2024/03/26 3:15 p.m.6 views

CVE-2023-50894

In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information...

8.8CVSS5.8AI score0.00424EPSS
SaveExploits0References2
NVD
NVD
added 2024/03/26 3:15 p.m.13 views

CVE-2023-50894

In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information...

8.8CVSS6.5AI score0.00424EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/26 12:0 a.m.10 views

CVE-2023-50894

In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information...

6.8AI score0.00424EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/26 12:0 a.m.7 views

Janitza GridVis 安全漏洞

Janitza GridVis is a grid monitoring software from Janitza. A security vulnerability exists in Janitza GridVis version 9.0.66 and prior versions that stems from the use of hard-coded credentials...

8.8CVSS6.8AI score0.00424EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/26 12:0 a.m.8 views

PT-2024-13996 · Janitza · Gridvis

Name of the Vulnerable Software and Affected Versions: Janitza GridVis versions 9.0.66 and earlier Description: The issue concerns the use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function. This allows remote authenticated...

8.8CVSS6.9AI score0.00424EPSS
SaveExploits0References4
NVD
NVD
added 2024/03/21 6:15 a.m.23 views

CVE-2024-2161

Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227...

9.8CVSS9.6AI score0.00906EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2024/03/21 6:0 a.m.15 views

CVE-2024-2161 Use of Hard-coded Credentials in Kiloview NDI N series products API middleware

Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227...

9.8CVSS7AI score0.00906EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/03/21 12:0 a.m.23 views

PT-2024-18972 · Kiloview · Kiloview Ndi

Name of the Vulnerable Software and Affected Versions: Kiloview NDI versions prior to 2.02.0227 Description: The issue is related to the use of hard-coded credentials in Kiloview NDI, allowing un-authenticated users to bypass authentication. This affects models N3, N3-s, N4, N20, N30, N40...

9.8CVSS7.3AI score0.00906EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/03/21 12:0 a.m.6 views

Kiloview NDI多个产品安全漏洞

Kiloview NDI N4 and Kiloview NDI N3 are both products of China-based Kiloview.Kiloview NDI N4 is a multi-channel NDI video encoder.Kiloview NDI N3 is a compact NDI video encoder. A security vulnerability exists in multiple Kiloview NDI products that stems from the use of hard-coded credentials th...

9.8CVSS6.8AI score0.00906EPSS
SaveExploits0References7
Prion
Prion
added 2024/03/13 10:15 p.m.34 views

Hardcoded credentials

Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The vulnerability could compromise the cryptographic keys...

1CVSS7.4AI score0.00273EPSS
SaveExploits0References1
ICS
ICS
added 2024/03/07 7:0 a.m.74 views

Chirp Systems Chirp Access (Update C)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 2.3 ATTENTION : Low attack complexity Vendor : Chirp Systems Equipment : Chirp Access Vulnerability : Use of Hard-coded Password 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to adjust the Beacon configuration...

4.3CVSS4.4AI score0.00283EPSS
SaveExploits0References10
OSV
OSV
added 2024/03/05 11:15 a.m.8 views

CVE-2023-5456

A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated attacker to access the database service and all included data with the same privileges of the web application. This issue affects: AiLux imx6 bundle below version...

9.8CVSS7.3AI score0.00591EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/05 11:15 a.m.22 views

CVE-2023-5456

A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated attacker to access the database service and all included data with the same privileges of the web application. This issue affects: AiLux imx6 bundle below version...

9.8CVSS8.1AI score0.00591EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/05 11:15 a.m.24 views

Hardcoded credentials

A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated attacker to access the database service and all included data with the same privileges of the web application. This issue affects: AiLux imx6 bundle below version...

5.1CVSS8AI score0.00591EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/05 11:10 a.m.26 views

CVE-2023-5456

A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated attacker to access the database service and all included data with the same privileges of the web application. This issue affects: AiLux imx6 bundle below version...

8.1CVSS8.2AI score0.00591EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/05 11:10 a.m.65 views

CVE-2023-5456

CVE-2023-5456 is a CWE-798 vulnerability affecting AiLux imx6 bundle prior to version imx6_1.0.7-2. The issue arises from hard-coded credentials in the MariaDB database used by the web application, enabling a remote unauthenticated attacker to access the database service and all data with the web...

9.8CVSS8AI score0.00591EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/05 12:0 a.m.10 views

PT-2024-14811 · Mariadb · Mariadb

Name of the Vulnerable Software and Affected Versions: AiLux imx6 bundle versions prior to imx6 1.0.7-2 Description: A CWE-798 “Use of Hard-coded Credentials” issue in the MariaDB database of the web application allows a remote unauthenticated attacker to access the database service and all...

9.8CVSS7.5AI score0.00591EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/05 12:0 a.m.12 views

AiLux imx6 Security Vulnerability

AiLux imx6 is a computing module from AiLux. A security vulnerability exists in versions prior to AiLux imx6 bundle imx61.0.7-2, which stems from the use of hard-coded credentials that allow an unauthenticated, remote attacker to access the database and all contained data...

9.8CVSS6.8AI score0.00591EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/03/01 12:0 a.m.5 views

TOTOLINK X6000R Trust Management Issue Vulnerability

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X6000R suffers from a trust management issue vulnerability that stems from the presence of hard-coded credentials in the file /etc/shadow. No detailed vulnerability details are available at this time...

5.5CVSS7AI score0.00316EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2024/02/21 12:0 a.m.33 views

Schneider Electric EcoStruxure IT Gateway Hard-Coded Credentials Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Schneider Electric EcoStruxure IT Gateway. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

7.8CVSS7.5AI score0.00238EPSS
SaveExploits0References1
Rows per page
Query Builder