Lucene search
+L

8371 matches found

CNNVD
CNNVD
added 2022/05/24 12:0 a.m.5 views

Telecommunication Software SAMwin Contact Center Suite 信任管理问题漏洞

Telecommunication Software SAMwin Contact Center Suite is a highly versatile and flexible contact center software solution from Telecommunication Software. A security vulnerability exists in Telecommunication Software SAMwin Contact Center Suite version 5.1, which stems from a function...

9.1CVSS8.2AI score0.0078EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/05/23 12:0 a.m.46 views

Rakuten Mobile Rakuten Casa Trust Management Issue Vulnerability

Rakuten Mobile Rakuten Casa is a small base station from Rakuten Mobile Japan, Inc. A trust management issue vulnerability exists in Rakuten Mobile Rakuten Casa APFV200 and APFV141 versions, which stems from the presence of hard-coded credentials in the application code. An unauthenticated, remot...

5CVSS3.1AI score0.01456EPSS
SaveExploits0
CNVD
CNVD
added 2022/05/23 12:0 a.m.69 views

InHand Networks InRouter302硬编码凭证漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. InHand Networks InRouter302 version 3.5.37 contains a hard-coded credential vulnerability that could be exploited by an attacker to send specially crafted network requests that could lead to the execution of...

8.8CVSS6.3AI score0.01016EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/05/20 8:20 p.m.45 views

CVE-2022-29186 Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and rundeck-enterprise docker images contained a pre-generated SSH keypair. If the idrsa.pub public key of the keypair was copied to authorizedkeys files on remote host, those hosts...

9.1CVSS9.8AI score0.01159EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/05/20 8:20 p.m.6 views

CVE-2022-29186 Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and rundeck-enterprise docker images contained a pre-generated SSH keypair. If the idrsa.pub public key of the keypair was copied to authorizedkeys files on remote host, those hosts...

9.1CVSS7.3AI score0.01159EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/05/19 6:13 a.m.5 views

Multiple vulnerabilities in Rakuten Casa

Overview Rakuten Casa provided by Rakuten Mobile, Inc. contains multiple vulnerabilities listed below. Use of Hard-coded Credentials CWE-798 - CVE-2022-29525 Improper Access Control CWE-284 - CVE-2022-28704 Improper Access Control CWE-284 - CVE-2022-26834 CVE-2022-29525 Narumi Hirai of LAC Co.,...

9.8CVSS7.1AI score0.02572EPSS
SaveExploits0References10
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/05/19 12:0 a.m.63 views

JVN#46892984: Multiple vulnerabilities in Rakuten Casa

Rakuten Casa provided by Rakuten Mobile, Inc. contains multiple vulnerabilities listed below. Use of Hard-coded Credentials CWE-798 - CVE-2022-29525 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N| Base Score: 5.9 CVSS v2| AV:N/AC:M/Au:N/C:C/I:N/A:N| Base...

9.8CVSS8AI score0.02572EPSS
SaveExploits0
OSV
OSV
added 2022/05/18 12:15 p.m.19 views

CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

9.8CVSS5.7AI score0.01575EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/18 12:15 p.m.4 views

CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

10CVSS5.8AI score0.01575EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/18 12:15 p.m.9 views

CVE-2022-29645

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample...

9.8CVSS5.7AI score0.01448EPSS
SaveExploits1References1
NVD
NVD
added 2022/05/18 12:15 p.m.25 views

CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

10CVSS0.01575EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/18 11:50 a.m.70 views

CVE-2022-29645

The CVE-2022-29645 entry concerns TOTOLINK A3100R devices. Connected sources confirm the affected models: V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129. The underlying issue is a hard coded root password stored in the component /etc/shadow.sample, enabling unauthorized root access. CVSS dat...

10CVSS9.5AI score0.01448EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/18 11:50 a.m.31 views

CVE-2022-29645

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample...

9.8AI score0.01448EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/05/18 11:50 a.m.35 views

CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

9.8AI score0.01575EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/18 11:50 a.m.91 views

CVE-2022-29644

CVE-2022-29644 affects TOTOLINK A3100R devices (firmware versions V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129). The issue is a hard-coded password for the Telnet service stored in the component /web_cste/cgi-bin/product.ini, creating an unauthenticated control risk over the device. The NV...

10CVSS9.5AI score0.01575EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
added 2022/05/17 12:0 a.m.34 views

Katello uses hard coded credential

The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secrettoken value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary...

9.8CVSS7.2AI score0.03002EPSS
SaveExploits0References1Affected Software1
Code423n4
Code423n4
added 2022/05/15 12:0 a.m.7 views

hard-coded slippage may freeze user funds during market turbulence

Lines of code Vulnerability details Impact GeneralVault.solL125 GeneralVault set a hardcoded slippage control of 99%. However, the underlying yield tokens price may go down. If Luna/UST things happen again, users' funds may get locked. LidoVault.solL130-L137 Moreover, the withdrawal of the...

6.8AI score
SaveExploits0
Code423n4
Code423n4
added 2022/05/15 12:0 a.m.20 views

hard-coded slippage may freeze user funds during market turbulence (resubmit to downgrade severity)

Lines of code Vulnerability details Impact GeneralVault.solL125 GeneralVault set a hardcoded slippage control of 99%. However, the underlying yield tokens price may go down. If Luna/UST things happen again, users' funds may get locked. LidoVault.solL130-L137 Moreover, the withdrawal of the...

6.8AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2022/05/14 1:17 a.m.38 views

Use of Hard-coded Cryptographic Key in Apache Tomcat

DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret aka private key, which makes it easier for remote attackers to bypass cryptographic...

4.3CVSS4.2AI score0.0657EPSS
SaveExploits0References20Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/05/13 8:15 p.m.7 views

CVE-2022-1701

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data...

7.5CVSS5.8AI score0.04642EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder