5859 matches found
CVE-2020-11549: Use of Hard-coded Credentials
An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 V2.5.1.106, Outdoor Satellite RBS50Y V2.5.1.106, and Pro Tri-Band Business WiFi Router SRR60 AC3000 V2.5.1.106. The root account has the same password as the Web-admin component. Thus, by exploiting...
PT-2020-6331
Name of the Vulnerable Software and Affected Versions Vijeo Designer Basic versions V1.1 HotFix 16 and prior Vijeo Designer versions V6.2 SP9 and prior Description The issue is related to the use of hard-coded credentials. Exploitation of this issue may allow a remote attacker to gain unauthorize...
CVE-2020-5248: Use of Hard-coded Credentials
GLPI before before version 9.4.6 has a vulnerability involving a default encryption key. GLPIKEY is public and is used on every instance. This means anyone can decrypt sensitive data stored using this key. It is possible to change the key before installing GLPI. But on existing instances, data mu...
CVE-2020-4429: Use of Hard-coded Credentials
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534...
CVE-2020-3301: Use of Hard-coded Credentials
Multiple vulnerabilities in Cisco Firepower Management Center FMC Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of...
CVE-2020-3318: Use of Hard-coded Credentials
Multiple vulnerabilities in Cisco Firepower Management Center FMC Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of...
CVE-2020-12110: Use of Hard-coded Credentials
Certain TP-Link devices have a Hardcoded Encryption Key. This affects NC200 2.1.9 build 200225, N210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304...
CVE-2019-5622
Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...
CVE-2019-5622
Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...
Hardcoded credentials
Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...
CVE-2019-5622 Accellion File Transfer Appliance Use of Hard-coded Credentials
Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...
CVE-2019-5622
CVE-2019-5622 affects Accellion File Transfer Appliance (FTA_8_0_540) and is caused by CWE-798: Use of Hard-coded Credentials. Multiple connected records corroborate a hard-coded/default credential issue in the FTA, implying high impact with potential unauthorized access. The CVSS data (v2/v3) ci...
PT-2020-11149
Name of the Vulnerable Software and Affected Versions Accellion File Transfer Appliance version FTA 8 0 540 Description The issue is related to the use of hard-coded credentials, which is an instance of CWE-798. This means that the credentials are embedded directly in the software, potentially...
CVE-2019-5622: Use of Hard-coded Credentials
Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...
CVE-2020-10996: Use of Hard-coded Credentials
An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transitionkey for SST processes in place of the random key expected...
CVE-2018-21137: Use of Hard-coded Credentials
Certain NETGEAR devices are affected by a hardcoded password. This affects D3600 before 1.0.0.76 and D6000 before 1.0.0.76...
HCL Technologies AppScan Enterprise Trust Management Issue Vulnerability
HCL Technologies AppScan is a suite of dynamic analysis testing tools from HCL Technologies, India, which is primarily used for web security testing. A security vulnerability exists in HCL Technologies AppScan Enterprise 9.0.3.14 and earlier versions, which stems from the product's use of...
CVE-2019-4327
"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...