Lucene search
+L

11886 matches found

Cvelist
Cvelist
•added 2020/04/29 10:15 p.m.•45 views

CVE-2019-5622 Accellion File Transfer Appliance Use of Hard-coded Credentials

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

9.6AI score0.01101EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/04/29 12:00 a.m.•9 views

PT-2020-11149

Name of the Vulnerable Software and Affected Versions Accellion File Transfer Appliance version FTA 8 0 540 Description The issue is related to the use of hard-coded credentials, which is an instance of CWE-798. This means that the credentials are embedded directly in the software, potentially...

9.8CVSS0.01101EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/29 12:00 a.m.•10 views

CVE-2019-5622: Use of Hard-coded Credentials

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

9.8CVSS8.3AI score0.01101EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2020/04/28 5:15 p.m.•13 views

CVE-2016-11058

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...

7.5CVSS5.8AI score0.01217EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/28 12:00 a.m.•11 views

CVE-2016-11058: Insufficient Session Expiration

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...

7.5CVSS7.3AI score0.01217EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/04/28 12:00 a.m.•9 views

PT-2020-7987

Name of the Vulnerable Software and Affected Versions: NETGEAR genie application version prior to 2.4.34 for Android Description: The issue concerns the mishandling of hard-coded API keys and session IDs. Recommendations: For versions prior to 2.4.34, update to version 2.4.34 or later to resolve...

7.5CVSS0.01217EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/27 12:00 a.m.•10 views

CVE-2020-10996: Use of Hard-coded Credentials

An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transitionkey for SST processes in place of the random key expected...

8.1CVSS7.5AI score0.0154EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/23 12:00 a.m.•13 views

CVE-2018-21137: Use of Hard-coded Credentials

Certain NETGEAR devices are affected by a hardcoded password. This affects D3600 before 1.0.0.76 and D6000 before 1.0.0.76...

9.8CVSS7.8AI score0.01443EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/04/22 12:00 a.m.•22 views

HCL Technologies AppScan Enterprise Trust Management Issue Vulnerability

HCL Technologies AppScan is a suite of dynamic analysis testing tools from HCL Technologies, India, which is primarily used for web security testing. A security vulnerability exists in HCL Technologies AppScan Enterprise 9.0.3.14 and earlier versions, which stems from the product's use of...

7.5CVSS6.8AI score0.01015EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/04/21 7:15 p.m.•15 views

CVE-2019-4327

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

7.5CVSS7.1AI score0.01015EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/21 7:15 p.m.•44 views

CVE-2019-4327

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

7.5CVSS7.5AI score0.01015EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/21 7:15 p.m.•35 views

Hardcoded credentials

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

5CVSS7.5AI score0.01015EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/21 6:13 p.m.•47 views

CVE-2019-4327

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

7.5AI score0.01015EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/21 6:13 p.m.•69 views

CVE-2019-4327

CVE-2019-4327 affects HCL AppScan Enterprise. The connected CNVD entry specifies the vulnerability exists in AppScan Enterprise versions 9.0.3.14 and earlier, arising from the use of hard-coded credentials. As a result, an attacker could gain unauthorized access to the application's encrypted fil...

7.5CVSS7.5AI score0.01015EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/21 12:00 a.m.•10 views

CVE-2019-4327: Use of Hard-coded Credentials

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

7.5CVSS7.3AI score0.01015EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/04/21 12:00 a.m.•10 views

PT-2020-10942

Name of the Vulnerable Software and Affected Versions HCL AppScan Enterprise affected versions not specified Description The issue concerns the use of hard-coded credentials in HCL AppScan Enterprise, which can be exploited by attackers to gain unauthorized access to the application's encrypted...

7.5CVSS0.01015EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/04/21 12:00 a.m.•31 views

D-Link DSL-2640B B2 Trust Management Issue Vulnerability

The D-Link DSL-2640B B2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DSL-2640B B2 EU4.01B version, which comes with hard-coded accounts in the router. The vulnerability can be exploited by an attacker to log in to the management interface,...

10CVSS7AI score0.02187EPSS
SaveExploits1References1
NVD
NVD
•added 2020/04/20 11:15 p.m.•29 views

CVE-2020-9279

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device...

10CVSS9.6AI score0.02187EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2020/04/20 11:15 p.m.•21 views

CVE-2020-9279

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device...

9.8CVSS7.3AI score0.02187EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2020/04/20 11:15 p.m.•18 views

CVE-2020-9279

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device...

10CVSS7.7AI score0.02187EPSS
SaveExploits1References5
Rows per page
Query Builder