Lucene search
+L

3939 matches found

Vulnrichment
Vulnrichment
added 2025/03/15 1:31 p.m.7 views

CVE-2025-2322 274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is...

7.5CVSS6.5AI score0.00699EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/03/15 1:31 p.m.22 views

CVE-2025-2322 274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is...

7.5CVSS0.00699EPSS
SaveExploits1References4
CVE
CVE
added 2025/03/15 1:31 p.m.68 views

CVE-2025-2322

CVE-2025-2322 affects the project identified as 274056675, specifically the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The root cause is hard-coded credentials leading to a remote attack vector. The vulnerability is classified as critical (per th...

9.8CVSS6.6AI score0.00699EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2025/03/15 12:0 a.m.8 views

springboot-openai-chatgpt 安全漏洞

springboot-openai-chatgpt is a SpringCloud microservices based architecture by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt, which stems from hard-coded credentials and could lead to remote attacks...

9.8CVSS7.5AI score0.00699EPSS
SaveExploits1References6
OSV
OSV
added 2025/03/14 12:15 p.m.10 views

CVE-2024-13773

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including Linked...

7.5CVSS5.8AI score0.00264EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/14 12:15 p.m.13 views

CVE-2024-13773

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including Linked...

7.5CVSS0.00264EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/14 11:15 a.m.24 views

CVE-2024-13773 Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including Linked...

7.3CVSS0.00264EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/14 11:15 a.m.64 views

CVE-2024-13773

CVE-2024-13773 affects the Civi - Job Board & Freelance Marketplace WordPress Theme (

7.5CVSS7.1AI score0.00264EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/14 11:15 a.m.9 views

CVE-2024-13773 Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including Linked...

7.3CVSS7.1AI score0.00264EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/14 12:0 a.m.9 views

WordPress plugin Civi 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS8.8AI score0.00264EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/03/12 10:47 a.m.9 views

CVE-2025-27255

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...

8CVSS6.9AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/10 9:15 a.m.8 views

CVE-2025-27255

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...

8CVSS0.00149EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/10 9:5 a.m.6 views

CVE-2025-27255

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...

8CVSS7.2AI score0.00149EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/10 9:5 a.m.24 views

CVE-2025-27255

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user database is encrypted using an hardcoded password retrievable by an attacker analyzing the application code...

8CVSS0.00149EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/10 9:5 a.m.83 views

CVE-2025-27255

This CVE concerns GE Vernova EnerVista UR Setup. The vulnerability arises from hard-coded credentials used to encrypt the local user database, with the credential password retrievable by analyzing the application code. A local attacker could leverage this to escalate privileges on the affected sy...

8CVSS7.2AI score0.00149EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/10 12:0 a.m.10 views

GE Vernova EnerVista UR 信任管理问题漏洞

GE Vernova EnerVista UR is a device configuration tool from GE Vernova USA that is compatible with all UR relay applications. A trust management issue vulnerability exists in the GE Vernova EnerVista UR that stems from the use of hard-coded credentials, which could lead to elevation of privilege...

8CVSS6.6AI score0.00149EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/05 8:15 a.m.7 views

CVE-2025-1393

An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product...

9.8CVSS0.00546EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/05 8:3 a.m.4 views

CVE-2025-1393 Weidmueller: Authentication Vulnerability due to Hard-coded Credentials

An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product...

9.8CVSS7.6AI score0.00546EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/05 8:3 a.m.51 views

CVE-2025-1393

CVE-2025-1393: An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product. Multiple connected sources confirm unauthenticated access with full admin rights; one listing ties the issue to Weidmueller PROCON-WIN versions prior to...

9.8CVSS7.6AI score0.00546EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/05 8:3 a.m.15 views

CVE-2025-1393 Weidmueller: Authentication Vulnerability due to Hard-coded Credentials

An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product...

9.8CVSS0.00546EPSS
SaveExploits0References1
Rows per page
Query Builder