Lucene search
+L

11809 matches found

Cvelist
Cvelist
•added 2023/01/01 8:35 a.m.•37 views

CVE-2014-125030 taoeffect Empress hard-coded password

A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected by this issue is some unknown functionality. The manipulation leads to use of hard-coded password. The patch is identified as 557e177d8a309d6f0f26de46efb38d43e000852d. It is recommended to apply a pat...

6.3CVSS9.5AI score0.00917EPSS
SaveExploits0References4
CVE
CVE
•added 2023/01/01 8:35 a.m.•63 views

CVE-2014-125030

CVE-2014-125030 affects taoeffect Empress. The vulnerability is due to hard-coded credentials in an unknown functionality, classified as critical. A patch is identified as 557e177d8a309d6f0f26de46efb38d43e000852d and is recommended to fix the issue. Connected documents corroborate hard-coded pass...

9.8CVSS7AI score0.00917EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/01/01 12:00 a.m.•19 views

PT-2023-10100 · Unknown · Taoeffect Empress

Name of the Vulnerable Software and Affected Versions: taoeffect Empress affected versions not specified Description: A critical issue has been found in taoeffect Empress, affecting some unknown functionality. The manipulation leads to the use of a hard-coded password. Recommendations: To fix thi...

9.8CVSS7AI score0.00917EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/01/01 12:00 a.m.•20 views

Empress Trust Management Vulnerability

Empress is a lightweight branch of Sovereign focused on email by Greg Slepak, an individual developer. Empress is vulnerable to a trust management issue. An attacker exploits the vulnerability to cause victims to use hard-coded passwords...

9.8CVSS7AI score0.00917EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/01 12:00 a.m.•9 views

CVE-2014-125030: Use of Hard-coded Password

A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected by this issue is some unknown functionality. The manipulation leads to use of hard-coded password. The patch is identified as 557e177d8a309d6f0f26de46efb38d43e000852d. It is recommended to apply a pat...

9.8CVSS5.3AI score0.00917EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/12/28 12:00 a.m.•22 views

Elvexys ISOS Trust Management Vulnerability

Elvexys ISOS is an application from Elvexys, Inc. A security vulnerability exists in Elvexys ISOS versions 1.81 through 2.00, which stems from hard-coded credentials containing the embedded StreamX installer...

7.8CVSS7.3AI score0.00155EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/28 12:00 a.m.•9 views

CVE-2022-4780: Use of Hard-coded Credentials

ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX installer that integrators are not forced to change...

7.8CVSS5.7AI score0.00155EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/12/27 6:15 p.m.•24 views

CVE-2022-45425

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability...

7.5CVSS5.8AI score0.00566EPSS
SaveExploits0References1
NVD
NVD
•added 2022/12/27 6:15 p.m.•30 views

CVE-2022-45425

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability...

7.5CVSS0.00566EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/12/27 12:00 a.m.•17 views

CVE-2022-45425

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability...

6.9AI score0.00566EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/27 12:00 a.m.•10 views

CVE-2022-45425: Use of Hard-coded Credentials

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability...

7.5CVSS6AI score0.00566EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/27 12:00 a.m.•37 views

CVE-2022-45425

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability...

7.7AI score0.00566EPSS
SaveExploits0References1
CVE
CVE
•added 2022/12/27 12:00 a.m.•123 views

CVE-2022-45425

Affected software: Dahua software products. Issue: use of a hard-coded AES cryptographic key, enabling an attacker to obtain the AES key. Root cause cited across sources is hard-coded keys within the product set. Impact (per sources): confidentiality impact, high. Vector: network-based exploitati...

7.5CVSS7.5AI score0.00566EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
•added 2022/12/27 12:00 a.m.•31 views

Dahua software products have vulnerabilities related to trust management.

Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in a number of Dahua software products that stems from their use of hard-coded encryption keys that allow an attacker to obtain AES encryption keys...

7.5CVSS7.3AI score0.00566EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2022/12/22 12:02 p.m.•74 views

Critical Security Flaw Reported in Passwordstate Enterprise Password Manager

Multiple high-severity vulnerabilities have been disclosed in Passwordstate password management solution that could be exploited by an unauthenticated remote adversary to obtain a user's plaintext passwords. "Successful exploitation allows an unauthenticated attacker to exfiltrate passwords from ...

1.5AI score0.01041EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/21 12:00 a.m.•9 views

CVE-2022-36222: Use of Hard-coded Credentials

Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5st7o This account can be used locally to access the web admin interface...

8.4CVSS5.8AI score0.0029EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/12/19 3:15 p.m.•10 views

CVE-2022-4611

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS5AI score0.01309EPSS
SaveExploits2References4
osv_cve
osv_cve
•added 2022/12/19 3:15 p.m.•27 views

CVE-2022-4611

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS5AI score0.01309EPSS
SaveExploits2References3
NVD
NVD
•added 2022/12/19 3:15 p.m.•45 views

CVE-2022-4611

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS0.01309EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/19 12:00 a.m.•8 views

CVE-2022-4611: Use of Hard-coded Credentials

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS5.3AI score0.01309EPSS
SaveExploits2References3
Rows per page
Query Builder