Lucene search
+L

11637 matches found

CVE
CVE
•added 2024/12/13 2:00 p.m.•82 views

CVE-2024-48007

CVE-2024-48007 affects Dell RecoverPoint for Virtual Machines, version 6.0.x. The vulnerability stems from hard-coded credentials in the software, enabling a remote, unauthenticated attacker to access secrets and, consequently, unauthorized data. Documents consistently describe the impact as enab...

9.8CVSS6AI score0.00415EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:00 p.m.•17 views

CVE-2024-48007

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

5.3CVSS6AI score0.00415EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•8 views

CVE-2024-48007: Use of Hard-coded Credentials

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

9.8CVSS6AI score0.00415EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•24 views

PT-2024-9593 · Dell · Dell Recoverpoint For Virtual Machines

Name of the Vulnerable Software and Affected Versions: Dell RecoverPoint for Virtual Machines version 6.0.x Description: The issue is related to the use of hard-coded credentials in the software. A remote unauthenticated attacker could exploit this by gaining access to the source code, easily...

9.8CVSS5.9AI score0.00415EPSS
SaveExploits0References6
NVD
NVD
•added 2024/12/12 2:15 p.m.•46 views

CVE-2024-28146

The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device...

8.4CVSS0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/12 1:49 p.m.•95 views

CVE-2024-28146

The Image Access Scan2Net scanning software (versions 7.40 and earlier , 7.42 and earlier , and 7.42B and earlier ) is vulnerable to the use of hard-coded credentials . These credentials are used to encrypt configuration files during backups, decrypt new firmware during updates, and provide direc...

8.4CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•7 views

CVE-2024-28146: Use of Hard-coded Credentials

The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device...

8.4CVSS5.9AI score0.00266EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/12 12:00 a.m.•24 views

PT-2024-22296 · Image Access Gmbh · Scan2Net

Name of the Vulnerable Software and Affected Versions: Application affected versions not specified Description: The issue concerns the application's use of several hard-coded credentials. These credentials are used for encrypting config files during backup and decrypting new firmware during...

8.4CVSS7AI score0.00266EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•18 views

Image Access Scan2Net security vulnerability

Image Access Scan2Net is a scanning software from Image Access, Germany. A security vulnerability exists in Image Access Scan2Net versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier, which stems from the application's use of multiple hard-coded credentials to encrypt configuration...

8.4CVSS5.8AI score0.00266EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•21 views

COMFAST CF-WR630AX security vulnerabilities

COMFAST CF-WR630AX is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-WR630AX version v2.7.0.2, which stems from the use of hard-coded passwords found in /etc/shadow...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/12/09 12:00 a.m.•45 views

WAVLINK WN531P3 Hardcoded Vulnerability

WAVLINK WN531P3 is a router developed by China RuiYin Technology WAVLINK. The WAVLINK WN531P3 suffers from a hard-coded vulnerability that can be exploited by an attacker to submit a special request to access the system as root...

9.8CVSS8.5AI score0.00559EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/12/09 12:00 a.m.•102 views

WAVLINK WN701AE Hardcoded Vulnerability

WAVLINK WN701AE is a router developed by China RuiYin Technology WAVLINK. The WAVLINK WN701AE suffers from a hard-coded vulnerability that can be exploited by an attacker to submit a special request to access the system as root...

9.8CVSS8.5AI score0.00559EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/06 12:00 a.m.•16 views

Ubiquiti U7-Pro security vulnerabilities

Ubiquiti U7-Pro is a wireless remote access point from Ubiquiti, Inc. A security vulnerability exists in the Ubiquiti U7-Pro version 7.0.35, which stems from the inclusion of a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...

7.5CVSS5.9AI score0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/06 12:00 a.m.•24 views

WAVLINK WN701AE security vulnerability

WAVLINK WN701AE is a router developed by China RuiYin Technology WAVLINK. The WAVLINK WN701AE suffers from a hard-coded vulnerability that can be exploited by an attacker to submit a special request to access the system as root...

9.8CVSS8.3AI score0.00559EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/12/06 12:00 a.m.•21 views

WAVLINK WN531P3 security vulnerability

WAVLINK WN531P3 is a router developed by China RuiYin Technology WAVLINK. The WAVLINK WN531P3 suffers from a hard-coded vulnerability that can be exploited by an attacker to submit a special request to access the system as root...

9.8CVSS8.3AI score0.00559EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/12/06 12:00 a.m.•20 views

SICK’s various products have security vulnerabilities

SICK InspectorP61x and others are products of SICK, Germany.SICK InspectorP61x is an ultra-compact industrial 2D vision sensor.SICK InspectorP62x is an ultra-compact industrial 2D vision sensor.SICK TiM3xx is an opto-electronic laser scanner that scans the surrounding environment with the help of...

9CVSS5.8AI score0.00592EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/12/06 12:00 a.m.•23 views

Ubiquiti U6-LR security vulnerabilities

Ubiquiti U6-LR is a wireless remote access point from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti U6-LR version 6.6.65, which stems from the inclusion of a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...

9.8CVSS5.9AI score0.00445EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•6 views

CVE-2024-45319: Use of Hard-coded Credentials

A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication...

6.3CVSS8.4AI score0.00234EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/04 12:00 a.m.•15 views

Thinkware Cloud APK security vulnerability

Thinkware Cloud APK is a free Android app from Thinkware that allows easy access to Thinkware Car Recorder. A security vulnerability exists in Thinkware Cloud APK version v4.3.46 that stems from a hard-coded decryption key in the application, which allows an attacker to access sensitive data and...

6.5CVSS6.4AI score0.00528EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/12/04 12:00 a.m.•21 views

Cisco Unified IP Phone Use of Hard-coded Credentials (CVE-2007-1063)

The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.04SR1 and earlier, uses a hard- coded username and password, which allows remote attackers to access the device. This plugin only works with Tenable.ot. Please visit...

10CVSS5.9AI score0.03375EPSS
SaveExploits0References15
Rows per page
Query Builder