Lucene search
+L

11624 matches found

CVE
CVE
•added 2025/02/07 12:00 a.m.•79 views

CVE-2024-52881

AudioCodes One Voice Operations Center (OVOC) versions prior to 8.4.582 are vulnerable to a security issue caused by the use of a hard-coded cryptographic key . An attacker can exploit this flaw to decrypt sensitive data, specifically passwords extracted from the topology file . To remediate this...

7.5CVSS5.8AI score0.00358EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/07 12:00 a.m.•16 views

CVE-2024-52881

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to the use of a hard-coded key, an attacker is able to decrypt sensitive data such as passwords extracted from the topology file...

5.8AI score0.00358EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/07 12:00 a.m.•11 views

CVE-2024-52881: Use of Hard-coded Cryptographic Key

An issue was discovered in AudioCodes One Voice Operations Center OVOC before 8.4.582. Due to the use of a hard-coded key, an attacker is able to decrypt sensitive data such as passwords extracted from the topology file...

7.5CVSS5.9AI score0.00358EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/07 12:00 a.m.•30 views

PT-2025-5976 · Audiocodes · Audiocodes One Voice Operations Center

Name of the Vulnerable Software and Affected Versions: AudioCodes One Voice Operations Center OVOC versions prior to 8.4.582 Description: An issue was discovered due to the use of a hard-coded key, allowing an attacker to decrypt sensitive data, such as passwords extracted from the topology file...

7.5CVSS5.8AI score0.00358EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/02/07 12:00 a.m.•28 views

PT-2025-5993 · Unknown · Eli 280/Bur280/Mlbur 280 Resting Electrocardiograph +3

Name of the Vulnerable Software and Affected Versions: ELI 380 Resting Electrocardiograph versions 2.6.0 and prior ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph versions 2.3.1 and prior ELI 250c/BUR 250c Resting Electrocardiograph versions 2.1.2 and prior ELI 150c/BUR 150c/MLBUR 150c Restin...

6.4CVSS7.2AI score0.00266EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/02/07 12:00 a.m.•27 views

PT-2025-6036 · Tp Link · Tapo C500 Wi-Fi Camera

Name of the Vulnerable Software and Affected Versions: Tapo C500 Wi-Fi camera affected versions not specified Description: This issue exists due to a hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this to obtain cryptographic private...

7.2CVSS6.4AI score0.0026EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/02/07 12:00 a.m.•21 views

AudioCodes One Voice Operations Center security vulnerabilities

AudioCodes One Voice Operations Center AudioCodes OVOC is a web-based voice network management solution from AudioCodes, Inc. A security vulnerability exists in AudioCodes One Voice Operations Center OVOC versions prior to 8.4.582 that stems from the use of a hard-coded key that allows an attacke...

7.5CVSS5.8AI score0.00358EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/07 12:00 a.m.•11 views

CVE-2022-26388: Use of Hard-coded Password

A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 an...

6.4CVSS6.6AI score0.00266EPSS
SaveExploits0References1
Krebs on Security
Krebs on Security
•added 2025/02/06 9:12 p.m.•28 views

Experts Flag Security, Privacy Risks in DeepSeek AI App

New mobile apps from the Chinese artificial intelligence AI company DeepSeek have remained among the top three "free" downloads for Apple and Google devices since their debut on Jan. 25, 2025. But experts caution that many of DeepSeek's design choices -- such as using hard-coded encryption keys,...

7.1AI score
SaveExploits0
osv_cve
osv_cve
•added 2025/02/06 5:15 a.m.•25 views

CVE-2024-51547

Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

9.8CVSS8.4AI score0.00618EPSS
SaveExploits1References1
NVD
NVD
•added 2025/02/06 5:15 a.m.•38 views

CVE-2024-51547

Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

9.8CVSS0.00618EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/02/06 4:12 a.m.•46 views

CVE-2024-51547 Credentials Disclosure - keys

Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

9.8CVSS0.00618EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/06 4:12 a.m.•124 views

CVE-2024-51547

CVE-2024-51547 affects ABB ASPECT-Enterprise, ABB NEXUS Series and ABB MATRIX Series (firmware up to 3.08.03). The vulnerability stems from hard-coded credentials embedded in multiple components, enabling unauthorized access and potentially compromising confidentiality, integrity and availability...

9.8CVSS8.4AI score0.00618EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/06 4:12 a.m.•15 views

CVE-2024-51547 Credentials Disclosure - keys

Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

9.8CVSS8.4AI score0.00618EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/06 3:43 a.m.•18 views

CVE-2021-26611

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS8.6AI score0.01164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 12:41 a.m.•19 views

CVE-2022-3214

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing...

9.8CVSS8.1AI score0.02EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 12:02 a.m.•22 views

CVE-2022-29060

A use of hard-coded cryptographic key vulnerability CWE-321 in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0 may allow an attacker who managed to retrieve the key from one device to sign JWT tokens for any device...

8.1CVSS7.5AI score0.00677EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 12:00 a.m.•21 views

CVE-2022-29831

Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthenticated attacker to obtain information about the project file for MELSEC safety CPU modules...

7.5CVSS7.4AI score0.0134EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/02/06 12:00 a.m.•67 views

SunGrow WiNet-S Trust Management Issues Vulnerability

SunGrow WiNet-S is a LAN communication module from SunGrow, China. A trust management issue vulnerability exists in SunGrow WiNet-S version V200.001.00.P027 and prior versions, which stems from the use of hard-coded MQTT credentials. An attacker could use this vulnerability to send arbitrary...

5.4CVSS6.1AI score0.00244EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/06 12:00 a.m.•8 views

CVE-2024-47256: Use of Hard-coded Cryptographic Key

Successful exploitation of this vulnerability could allow an attacker who needs to have Admin access privileges to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander version 1.14 and older. 2N has released an updated version...

6CVSS5.9AI score0.00156EPSS
SaveExploits0References1
Rows per page
Query Builder