Lucene search
+L

8301 matches found

Vulnrichment
Vulnrichment
added 2023/01/11 8:23 a.m.11 views

CVE-2022-34440

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contains a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the system to gain admin privileges...

8.4CVSS7.1AI score0.00472EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/01/11 8:23 a.m.27 views

CVE-2022-34440

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contains a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the system to gain admin privileges...

8.4CVSS9.6AI score0.00472EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/01/11 12:00 a.m.8 views

Dell EMC Secure Connect Gateway 信任管理问题漏洞

Dell EMC Secure Connect Gateway Dell Emc Scg is a type of secure connectivity gateway from Dell USA. A security vulnerability exists in Dell EMC SCG Policy Manager versions 5.10 through 5.12, which originates from an attacker being able to log in to the system with a hard-coded encryption key to...

9.8CVSS8.4AI score0.00472EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/01/11 12:00 a.m.8 views

Dell EMC Secure Connect Gateway 信任管理问题漏洞

Dell EMC Secure Connect Gateway Dell Emc Scg is a type of secure connectivity gateway from Dell USA. A security vulnerability exists in Dell EMC SCG Policy Manager versions 5.10 through 5.12, which originates from an attacker being able to log in to the system with a hard-coded encryption key to...

9.8CVSS8.4AI score0.00472EPSS
SaveExploits0References2
NVD
NVD
added 2023/01/07 9:15 a.m.26 views

CVE-2018-25069

A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability...

9.8CVSS7.9AI score0.00863EPSS
SaveExploits0References3
CVE
CVE
added 2023/01/07 8:40 a.m.69 views

CVE-2018-25069

Netis Netcore Router is affected by CVE-2018-25069, a vulnerability described as a critical issue involving hard-coded credentials. The available connected documents confirm the flaw enables remote initiation and relates to Netcore Router products, with the root cause stated as hard-coded passwor...

9.8CVSS7.9AI score0.00863EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/07 8:40 a.m.11 views

CVE-2018-25069 Netis Netcore Router hard-coded password

A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability...

7.5CVSS7AI score0.00863EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/01/07 8:40 a.m.35 views

CVE-2018-25069 Netis Netcore Router hard-coded password

A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability...

7.5CVSS9.6AI score0.00863EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/01/07 12:00 a.m.9 views

PT-2023-10810 · Netis · Netis Netcore Router

Name of the Vulnerable Software and Affected Versions: Netis Netcore Router affected versions not specified Description: A critical vulnerability has been found in the Netis Netcore Router, affecting an unknown part. The issue leads to the use of a hard-coded password and can be initiated remotel...

9.8CVSS7.1AI score0.00863EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/01/07 12:00 a.m.16 views

Netis Netcore Router 安全漏洞

The Netis Netcore Router is a series of routers from Netis. The Netis Netcore Router has a security vulnerability that stems from the use of hard-coded passwords...

9.8CVSS7.5AI score0.00863EPSS
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2023/01/06 12:00 a.m.81 views

Use of Hard-coded Credentials

KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermor...

9.8CVSS9AI score0.69667EPSS
SaveExploits1References6Affected Software1
CNNVD
CNNVD
added 2023/01/05 12:00 a.m.9 views

Hitachi FOXMAN-UN 信任管理问题漏洞

Hitachi FOXMAN-UN is a powerful toolset for a comprehensive NMS suite from Hitachi, Japan. A security vulnerability exists in Hitachi FOXMAN-UN, which stems from the fact that its message queue contains hard-coded credentials that allow an attacker to access data from the internal message queue...

7.1CVSS5.7AI score0.00211EPSS
SaveExploits0References4
ICS
ICS
added 2023/01/05 12:00 a.m.48 views

Hitachi Energy FOXMAN-UN

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: FOXMAN-UN Vulnerabilities: Inadequate Encryption Strength, Use of Default Cryptographic Key, Use of Hard-coded Cryptographic Key, Cleartext Transmission of Sensitive...

9.8CVSS7.4AI score0.00569EPSS
SaveExploits0References3
ICS
ICS
added 2023/01/05 12:00 a.m.39 views

Hitachi Energy UNEM

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: UNEM Vulnerabilities: Inadequate Encryption Strength, Use of Hard-coded Cryptographic Key, Cleartext Transmission of Sensitive Information. 2. RISK EVALUATION Successful...

9.8CVSS7.4AI score0.00569EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/01/04 3:04 p.m.8 views

CVE-2023-22463 KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token

KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermor...

9.8CVSS9.8AI score0.69667EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2023/01/04 3:04 p.m.30 views

CVE-2023-22463 KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token

KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermor...

9.8CVSS9.8AI score0.69667EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/01/04 12:00 a.m.5 views

PT-2023-18515 · Kubepi · Kubepi

Name of the Vulnerable Software and Affected Versions: KubePi versions prior to 1.6.3 Description: The jwt authentication function of KubePi uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the...

9.8CVSS9.7AI score0.69667EPSS
SaveExploits1References10
NVD
NVD
added 2023/01/03 3:15 a.m.24 views

CVE-2022-47618

Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can use these credentials to log in administrator page, to manipulate system or disrupt service...

9.8CVSS9.6AI score0.01022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/01/03 12:00 a.m.8 views

CVE-2022-47618 Merit Lilin Ent. Co., Ltd. AH55B04 & AH55B08 DVR - Hard-coded Credentials

Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can use these credentials to log in administrator page, to manipulate system or disrupt service...

9.8CVSS7.1AI score0.01022EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/01/03 12:00 a.m.52 views

CVE-2022-47618 Merit Lilin Ent. Co., Ltd. AH55B04 & AH55B08 DVR - Hard-coded Credentials

Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can use these credentials to log in administrator page, to manipulate system or disrupt service...

9.8CVSS9.7AI score0.01022EPSS
SaveExploits0References1
Rows per page
Query Builder