Lucene search
+L

5931 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/03 12:00 a.m.•10 views

CVE-2024-41777: Use of Hard-coded Credentials

IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

7.5CVSS5.8AI score0.00253EPSS
SaveExploits0References1
NCSC
NCSC
•added 2024/12/02 10:55 a.m.•19 views

Vulnerabilities fixed in IBM Security Verify Access Appliance

IBM has fixed vulnerabilities in IBM Security Verify Access Appliance Versions 10.0.0 to 10.0.8. The vulnerabilities include an ability for remote authenticated attackers to execute arbitrary commands on the system, privilege escalation for locally authenticated non-administrative users through...

9.8CVSS7.7AI score0.00771EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•7 views

CVE-2024-53484: Use of Hard-coded Credentials

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key...

8.8CVSS5.8AI score0.00488EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/29 5:15 p.m.•18 views

CVE-2024-49805

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.8CVSS7.5AI score0.00331EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/29 5:15 p.m.•20 views

CVE-2024-49806

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.8CVSS7.5AI score0.00317EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/29 5:15 p.m.•28 views

CVE-2024-49805

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.8CVSS0.00331EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/29 5:15 p.m.•34 views

CVE-2024-49806

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.8CVSS0.00317EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/29 4:53 p.m.•79 views

CVE-2024-49806

CVE-2024-49806 affects IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8. The root cause is hard-coded credentials used for inbound authentication, outbound communication, or internal data encryption. Impact is high on confidentiality, integrity, and availability; CVSS base scor...

9.8CVSS9.3AI score0.00317EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/29 4:53 p.m.•30 views

CVE-2024-49806 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS6.9AI score0.00317EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/29 4:53 p.m.•42 views

CVE-2024-49806 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS0.00317EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/29 4:52 p.m.•21 views

CVE-2024-49805 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS6.9AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/29 4:52 p.m.•92 views

CVE-2024-49805

IBM Security Verify Access Appliance (ISVA) versions 10.0.0–10.0.8 contain hard-coded credentials used for inbound authentication, outbound communications, or internal data encryption. Root cause: credential exposure within the appliance. Impact in the public reports ranges from high confidential...

9.8CVSS9.3AI score0.00331EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/11/29 4:52 p.m.•38 views

CVE-2024-49805 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS0.00331EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/29 12:00 a.m.•21 views

PT-2024-33691 · Ibm · Ibm Security Verify Access Appliance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8 Description: The issue concerns hard-coded credentials, such as a password or cryptographic key, used by the appliance for its own inbound authentication, outbound...

9.8CVSS7AI score0.00317EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/11/29 12:00 a.m.•21 views

PT-2024-33690 · Ibm · Ibm Security Verify Access Appliance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8 Description: The issue concerns the presence of hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to...

9.8CVSS7.2AI score0.00331EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/29 12:00 a.m.•4 views

CVE-2024-49806: Use of Hard-coded Credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.8CVSS8.4AI score0.00317EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/29 12:00 a.m.•29 views

IBM Security Verify Access 信任管理问题漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

9.8CVSS9AI score0.00331EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/29 12:00 a.m.•6 views

CVE-2024-49805: Use of Hard-coded Credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.8CVSS8.5AI score0.00331EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/11/27 11:19 a.m.•530 views

Exploit for Use of Hard-coded Credentials in Mariazevedo88 Travels-Java-Api

PoC Authentication Bypass MFA Really Simple Security WordPress...

9.8CVSS7.1AI score0.82218EPSS
SaveExploits23
CVE
CVE
•added 2024/11/26 10:57 a.m.•78 views

CVE-2024-50377

CVE-2024-50377 affects Advantech EKI-6333AC-2G (≤1.6.3), EKI-6333AC-2GD (≤1.6.3), and EKI-6333AC-1GPO (≤1.2.1). The issue is a CWE-798 “Use of Hard-coded Credentials” in the backup configuration functionality, where archives are encrypted with a static password. This could allow an attacker with ...

6.5CVSS6.7AI score0.00186EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder