Lucene search
+L

8393 matches found

CNVD
CNVD
added 2025/03/13 12:0 a.m.8 views

TRENDnet TEW-929DRU Hardcoded Password Vulnerability

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a hard-coded password vulnerability that can be exploited by an attacker to log in as root...

8CVSS6.4AI score0.00353EPSS
SaveExploits1References1
NCSC
NCSC
added 2025/03/12 10:51 a.m.10 views

Vulnerabilities fixed in Fortinet FortiSandbox

Fortinet has fixed vulnerabilities in FortiSandbox. The vulnerability with reference CVE-2024-45328 includes improper authorization that allows low-privileged administrators to execute elevated CLI commands through the GUI console. In addition, there is an SQL injection vulnerability with attribu...

8.8CVSS8.1AI score0.0963EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/03/12 10:47 a.m.9 views

CVE-2025-27255

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...

8CVSS6.9AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/10 9:15 a.m.8 views

CVE-2025-27255

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...

8CVSS0.00149EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/10 9:5 a.m.23 views

CVE-2025-27255

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...

8CVSS0.00149EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/10 9:5 a.m.6 views

CVE-2025-27255

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...

8CVSS7.2AI score0.00149EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/10 9:5 a.m.80 views

CVE-2025-27255

This CVE concerns GE Vernova EnerVista UR Setup. The vulnerability arises from hard-coded credentials used to encrypt the local user database, with the credential password retrievable by analyzing the application code. A local attacker could leverage this to escalate privileges on the affected sy...

8CVSS7.2AI score0.00149EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/10 12:0 a.m.9 views

GE Vernova EnerVista UR 信任管理问题漏洞

GE Vernova EnerVista UR is a device configuration tool from GE Vernova USA that is compatible with all UR relay applications. A trust management issue vulnerability exists in the GE Vernova EnerVista UR that stems from the use of hard-coded credentials, which could lead to elevation of privilege...

8CVSS6.6AI score0.00149EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/05 8:15 a.m.6 views

CVE-2025-1393

An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product...

9.8CVSS0.00546EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/05 8:3 a.m.4 views

CVE-2025-1393 Weidmueller: Authentication Vulnerability due to Hard-coded Credentials

An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product...

9.8CVSS7.6AI score0.00546EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/05 8:3 a.m.51 views

CVE-2025-1393

CVE-2025-1393: An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product. Multiple connected sources confirm unauthenticated access with full admin rights; one listing ties the issue to Weidmueller PROCON-WIN versions prior to...

9.8CVSS7.6AI score0.00546EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/05 8:3 a.m.14 views

CVE-2025-1393 Weidmueller: Authentication Vulnerability due to Hard-coded Credentials

An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product...

9.8CVSS0.00546EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/05 12:0 a.m.7 views

Vasion Print 安全漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. Vasion Print has a security vulnerability that stems from the use of hard-coded passwords...

9.8CVSS6.7AI score0.00868EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/03/05 12:0 a.m.3 views

Weidmueller Interface PROCON-WIN 信任管理问题漏洞

Weidmueller Interface PROCON-WIN is a controller from Weidmueller Interface. A trust management issue vulnerability exists in Weidmueller Interface PROCON-WIN versions prior to 5.7.14.1, which stems from the use of hard-coded credentials that allow an unauthenticated attacker to gain administrato...

9.8CVSS7AI score0.00546EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/05 12:0 a.m.6 views

Vasion Print 信任管理问题漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. Vasion Print has a security vulnerability that stems from the presence of hard-coded AWS API keys...

9.8CVSS6.7AI score0.00868EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/03/05 12:0 a.m.10 views

Vasion Print 安全漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print versions prior to 22.0.843 Application 20.0.1923, which stems from hard-coded IdP keys...

9.8CVSS6.6AI score0.00681EPSS
SaveExploits1References3
OSV
OSV
added 2025/03/04 9:15 a.m.7 views

CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules...

4.3CVSS5.8AI score0.00244EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/03/04 12:0 a.m.7 views

CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules...

4.3CVSS4.5AI score0.00244EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/03/04 12:0 a.m.6 views

DocuSnap 安全漏洞

DocuSnap is an app from DocuSnap that turns mobile devices into portable scanners. Used to scan, edit, store and share documents to PDF. A security vulnerability exists in DocuSnap 13.0.1440.24261 and earlier versions, which stems from the use of hard-coded encryption keys...

4.3CVSS6.7AI score0.00244EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/03/04 12:0 a.m.27 views

CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules...

4.3CVSS0.00244EPSS
SaveExploits1References2
Rows per page
Query Builder