Lucene search
+L

339 matches found

CNNVD
CNNVD
added 2023/10/25 12:00 a.m.12 views

Dromara Sureness Trust Management Issues Vulnerability

Sureness is dromara open source a simple and efficient security framework . Focused on API protection. A security vulnerability exists in versions prior to Dromara Sureness v1.0.8 that stems from the use of hard-coded keys when creating and validating Json Web tokens...

9.8CVSS6.7AI score0.00808EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/09/12 12:00 a.m.14 views

Xpand IT Write-back manager Trust Management Issue Vulnerability

Xpand IT Write-back manager is an extension for Xpand IT. that allows users to enter data directly from Tableau dashboards into a database. A security vulnerability exists in Xpand IT Write-back manager version v2.3.1, which stems from the use of a hard-coded salt in the configuration of the...

6.5CVSS6.7AI score0.0032EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/09/07 12:00 a.m.13 views

Internet Reservation Module Booking Engine Trust Management Issue Vulnerability

Internet Reservation Module Booking Engine is a reservation platform. A trust management issue vulnerability exists in Internet Reservation Module Booking Engine, which arises from the use of hard-coded API keys...

7.7CVSS6.8AI score0.00474EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/24 12:00 a.m.21 views

Gravitl Netmaker 信任管理问题漏洞

Gravitl Netmaker is a platform for creating and managing fast, secure and dynamic virtual overlay networks using WireGuard from Gravitl USA. For creating and controlling automated virtual networks. A security vulnerability exists in Gravitl Netmaker versions prior to 0.18.6 that stems from the...

7.5CVSS7.2AI score0.03534EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/08/11 12:00 a.m.14 views

AudioCodes VoIP Trust Management Issues Vulnerability

AudioCodes VoIP is a series of desktop phones from the Israeli company AudioCodes. A security vulnerability exists in AudioCodes VoIP version 3.4.4.1000 and prior versions, which stems from the use of hard-coded keys...

7.5CVSS6.8AI score0.01357EPSS
SaveExploits2References6
CNNVD
CNNVD
added 2023/08/11 12:00 a.m.15 views

AudioCodes VoIP Trust Management Issues Vulnerability

AudioCodes VoIP is a series of desk phones from the Israeli company AudioCodes. A security vulnerability exists in AudioCodes VoIP desk phones version 3.4.4.1000 and earlier versions, which stems from the use of hard-coded keys in libacdes3.so...

7.5CVSS6.7AI score0.01357EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2023/08/09 12:00 a.m.10 views

Kunduz Homework Helper App Security Vulnerability

Kunduz Homework Helper App is a homework help application from Kunduz. Sifir Bes Education and Informatics Kunduz - Homework Helper App version 6.2.3 previously had a security vulnerability that stemmed from the use of hard-coded encryption keys...

9.8CVSS6.8AI score0.00772EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:00 a.m.20 views

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system lies in the use of cryptographic algorithms with hard-programmed keys for encryption. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to the use of cryptographic algorithms for encryption with a hard-programmed key. Exploiting this vulnerability could allow an attacker, operating...

7.8CVSS7.3AI score0.00311EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
added 2023/07/13 12:00 a.m.15 views

SonicWALL Analytics和GMS 加密问题漏洞

SonicWALL Analytics and SonicWALL GMS are both products of SonicWALL, Inc. of the U.S. SonicWALL Analytics is a high-performance management and reporting engine for the Web.SonicWALL GMS is a global management system. A powerful and intuitive solution for organizations, distributed enterprises an...

9.8CVSS8.3AI score0.00311EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/13 12:00 a.m.40 views

WordPress plugin User Registration 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.9CVSS9AI score0.01691EPSS
SaveExploits2References6
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.12 views

SonicWALL GMS和SonicWALL Analytics 信任管理问题漏洞

SonicWALL Analytics and SonicWALL GMS are both products of SonicWALL, Inc. of the U.S. SonicWALL Analytics is a high-performance management and reporting engine for the Web.SonicWALL GMS is a global management system. A powerful and intuitive solution for organizations, distributed enterprises an...

7.5CVSS7.6AI score0.0081EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/07/10 12:00 a.m.13 views

SmartSoft SmartBPM.NET 信任管理问题漏洞

SmartSoft SmartBPM.NET is an enterprise process management platform from China-based SmartSoft Technologies SmartSoft. A trust management issue vulnerability exists in SmartSoft SmartBPM.NET that stems from the use of hard-coded authentication keys...

9.1CVSS8.3AI score0.00942EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/10 12:00 a.m.10 views

SmartSoft SmartBPM.NET 信任管理问题漏洞

SmartSoft SmartBPM.NET is an enterprise process management platform from China-based SmartSoft. A vulnerability in SmartSoft SmartBPM.NET exists due to a trust management issue that arises from the use of hard-coded machine keys...

9.8CVSS8.4AI score0.01006EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/05 12:00 a.m.14 views

AMI MegaRAC 信任管理问题漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

9.8CVSS8.4AI score0.0029EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/06/27 12:00 a.m.12 views

WordPress plugin EmbedPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

7.5CVSS7.8AI score0.00539EPSS
SaveExploits0References8
NVD
NVD
added 2023/06/02 11:15 a.m.16 views

CVE-2022-47617

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

7.2CVSS6.9AI score0.0051EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/02 12:00 a.m.68 views

CVE-2022-47617

CVE-2022-47617 affects Hitron CODA-5310, where hard-coded encryption/decryption keys are present in the code. The underlying issue allows a remote attacker, authenticated as an administrator, to decrypt system files using the embedded keys, enabling file access, modification, and potential servic...

7.2CVSS6.9AI score0.0051EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/02 12:00 a.m.12 views

PT-2023-15438 · Hitron · Hitron Coda-5310

Name of the Vulnerable Software and Affected Versions: Hitron CODA-5310 affected versions not specified Description: The issue concerns hard-coded encryption/decryption keys in the program code, allowing a remote attacker authenticated as an administrator to decrypt system files. This access...

7.2CVSS6.7AI score0.0051EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/06/02 12:00 a.m.11 views

CVE-2022-47617 Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

7.2CVSS6.9AI score0.0051EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2023/05/02 6:30 a.m.4 views

CVE-2022-47617

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

7.2CVSS7.2AI score0.0051EPSS
SaveExploits0References2
Rows per page
Query Builder