Lucene search
K

8 matches found

EUVD
EUVD
added 2026/02/06 4:22 p.m.5 views

EUVD-2026-5665

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt a...

7.1CVSS5.4AI score0.00097EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/02/06 4:22 p.m.29 views

CVE-2026-2103 Use of Hard-Coded Cryptographic Key for Password Storage

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt a...

7.1CVSS0.00097EPSS
Exploits1References1
CVE
CVE
added 2026/02/06 4:22 p.m.14 views

CVE-2026-2103

Infor SyteLine ERP is affected by CVE-2026-2103 due to hard-coded static cryptographic keys used to encrypt stored credentials (passwords, DB connection strings, API keys). The keys are identical across all installations, enabling an attacker with access to the application binary and database to ...

7.8CVSS5.4AI score0.00097EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/06 4:22 p.m.5 views

CVE-2026-2103 Use of Hard-Coded Cryptographic Key for Password Storage

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt a...

7.1CVSS5.4AI score0.00097EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.9 views

PT-2026-6732

Name of the Vulnerable Software and Affected Versions Infor SyteLine ERP affected versions not specified Description The software utilizes hard-coded, static cryptographic keys for encrypting stored credentials, including user passwords, database connection strings, and API keys. These encryption...

7.8CVSS5.5AI score0.00097EPSS
Exploits1References10
Penetration Testing Lab
Penetration Testing Lab
added 2024/08/20 7:0 a.m.14 views

Web Browser Stored Credentials

Microsoft introduced Data Protection Application Programming Interface DPAPI in Windows environments as a method to encrypt and decrypt sensitive data such as credentials using the… Continue reading - Web Browser Stored Credentials...

6.9AI score
Exploits0
Positive Technologies
Positive Technologies
added 2024/06/07 12:0 a.m.3 views

PT-2024-4074 · NetGear · Netgear Wnr614 N300

Name of the Vulnerable Software and Affected Versions: Netgear WNR614 N300 version 1.1.0.54 1.0.1 Description: The issue is related to the storage of protected information in an unencrypted form. This could allow a remote attacker to disclose protected information. The estimated number of...

8.8CVSS6.8AI score0.00349EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2021/03/29 12:0 a.m.5 views

PT-2021-11716 · Mobileiron · Mobileiron

Name of the Vulnerable Software and Affected Versions: MobileIron agents through 2021-03-22 for Android and iOS Description: The issue concerns a hardcoded encryption key used to encrypt username and password details during the authentication process. This key is located in the...

9.8CVSS7.1AI score0.01186EPSS
Exploits1References7
Rows per page
Query Builder