Lucene search
+L

1145 matches found

Cvelist
Cvelist
added 2026/05/12 4:54 p.m.55 views

CVE-2026-44278

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via...

2.3CVSS0.00097EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/10 9:00 a.m.10 views

CVE-2026-8243 Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key

A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This affects an unknown function of the component JNLP Deployment Endpoint. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack may be performed from remote. The vendor was...

6.9CVSS5.8AI score0.00292EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/05/10 9:00 a.m.23 views

EUVD-2026-28992

A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This affects an unknown function of the component JNLP Deployment Endpoint. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack may be performed from remote. The vendor was...

6.9CVSS5.8AI score0.00292EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/05/06 6:30 p.m.21 views

EUVD-2026-27840

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000...

8.5CVSS5.8AI score0.00113EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/06 3:46 p.m.9 views

CVE-2026-6787 Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process...

8.5CVSS5.3AI score0.00113EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/06 3:46 p.m.65 views

CVE-2026-6787 Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process...

8.5CVSS0.00113EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/06 3:46 p.m.7 views

CVE-2026-6787

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process...

8.5CVSS5.3AI score0.00113EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/06 12:00 a.m.18 views

PT-2026-37646

Name of the Vulnerable Software and Affected Versions WatchGuard Agent versions prior to 1.25.03.0000 Description The use of a hard-coded cryptographic key in WatchGuard Agent on Windows allows for the inclusion of code in an existing process. Recommendations Update to version 1.25.03.0000 or lat...

8.5CVSS5.9AI score0.00113EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/04 2:04 p.m.9 views

Security Bulletin:WebSphere Application Server Liberty could provide weaker than expected security (CVE-2025-14923)

Summary WebSphere Application Server Liberty could provide weaker than expected security Vulnerability Details CVEID:CVE-2025-14923 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected securit...

9.8CVSS5.8AI score0.00173EPSS
SaveExploits0Affected Software11
Cvelist
Cvelist
added 2026/04/19 10:15 p.m.41 views

CVE-2026-6580 liangliangyy DjangoBlog Amap API Call views.py hard-coded key

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

7.5CVSS0.00284EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/09 3:52 p.m.2 views

CVE-2026-33266

Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption key, an attacker who has stolen a cookie from a...

5.9AI score0.00234EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/09 2:39 p.m.12 views

CVE-2026-20709

A flaw was found in some Intel Pentium Processor Silver Series, Intel Celeron Processor J Series, and Intel Celeron Processor N Series. This vulnerability arises from the use of a default cryptographic key in the hardware. A sophisticated attacker with physical access and privileged user access...

6.6CVSS5.9AI score0.00111EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/08 7:25 p.m.9 views

CVE-2026-20709

Use of Default Cryptographic Key in the hardware for some IntelR PentiumR Processor Silver Series, IntelR CeleronR Processor J Series, IntelR CeleronR Processor N Series may allow an escalation of privilege. Hardware reverse engineer adversary with a privileged user combined with a high complexit...

6.6CVSS0.00111EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/08 6:20 p.m.29 views

CVE-2026-20709

Use of Default Cryptographic Key in the hardware for some IntelR PentiumR Processor Silver Series, IntelR CeleronR Processor J Series, IntelR CeleronR Processor N Series may allow an escalation of privilege. Hardware reverse engineer adversary with a privileged user combined with a high complexit...

6.6CVSS0.00111EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/08 6:20 p.m.5 views

CVE-2026-20709

Use of Default Cryptographic Key in the hardware for some IntelR PentiumR Processor Silver Series, IntelR CeleronR Processor J Series, IntelR CeleronR Processor N Series may allow an escalation of privilege. Hardware reverse engineer adversary with a privileged user combined with a high complexit...

6.6CVSS5.8AI score0.00111EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/08 12:00 a.m.16 views

PT-2026-31422

Use of Default Cryptographic Key in the hardware for some IntelR PentiumR Processor Silver Series, IntelR CeleronR Processor J Series, IntelR CeleronR Processor N Series may allow an escalation of privilege. Hardware reverse engineer adversary with a privileged user combined with a high complexit...

6.6CVSS5.8AI score0.00111EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/04/07 5:12 a.m.8 views

CVE-2026-5622

A vulnerability was determined in hcengineering Huly Platform 0.7.382. Affected by this issue is some unknown functionality of the file foundations/core/packages/token/src/token.ts of the component JWT Token Handler. This manipulation of the argument SERVERSECRET with the input secret causes use ...

6.3CVSS5.3AI score0.00255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/06 12:00 a.m.10 views

PT-2026-30565

A vulnerability was determined in hcengineering Huly Platform 0.7.382. Affected by this issue is some unknown functionality of the file foundations/core/packages/token/src/token.ts of the component JWT Token Handler. This manipulation of the argument SERVER SECRET with the input secret causes use...

6.3CVSS5.3AI score0.00255EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/05 7:45 a.m.5 views

CVE-2026-5549

A vulnerability was determined in Tenda AC10 16.03.10.10multiTDE01. Affected by this issue is some unknown functionality of the file /webrootro/pem/privkeySrv.pem of the component RSA 2048-bit Private Key Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The atta...

6.9CVSS5.6AI score0.00395EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/04/04 11:15 p.m.39 views

CVE-2026-5527

CVE-2026-5527 affects Tenda 4G03 Pro (versions 1.0/1.0re/01.bin/04.03.01.53). The issue resides in the ECDSA P-256 Private Key Handler, specifically the /etc/www/pem/server.key, where a hard-coded private key is used. This allows a remote attacker to exploit the vulnerability over the network wit...

6.9CVSS5.9AI score0.00435EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder