Lucene search
+L

5958 matches found

osv_cve
osv_cve
•added 2024/06/12 6:15 p.m.•20 views

CVE-2024-0865

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...

7.8CVSS5.8AI score0.00238EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/12 5:23 p.m.•57 views

CVE-2024-0865

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...

7.8CVSS6.7AI score0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/12 5:23 p.m.•57 views

CVE-2024-0865

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...

7.8CVSS0.00238EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/12 5:23 p.m.•108 views

CVE-2024-0865

CVE-2024-0865 affects Schneider Electric EcoStruxure IT Gateway (installer). Root cause: hard-coded credentials in the installer enable local privilege escalation for users with low privileges; attacker must already execute code locally. Exploitation details are described in ZDI reports (local es...

7.8CVSS6.8AI score0.00238EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•9 views

CVE-2024-0865: Use of Hard-coded Credentials

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...

7.8CVSS7.2AI score0.00238EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/12 12:00 a.m.•3 views

PT-2024-19321

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description A use of hard-coded credentials issue could lead to local privilege escalation when logged in as a non-administrative user. Recommendations At the moment, there is no information abou...

SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•12 views

CVE-2024-29855: Use of Hard-coded Credentials

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator...

9CVSS8.1AI score0.21634EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/06/10 12:00 a.m.•22 views

PT-2024-4063 · Veeam · Veeam Recovery Orchestrator

Name of the Vulnerable Software and Affected Versions: Veeam Recovery Orchestrator affected versions not specified Description: The issue is related to the use of hard-coded credentials in the Veeam Recovery Orchestrator web console, which can allow a remote attacker to bypass authentication and...

9CVSS9.2AI score0.21634EPSS
SaveExploits1References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/07 12:00 a.m.•11 views

CVE-2023-49224: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorizedkeys file. A remote attacker could use this key to gain root privileges...

8CVSS5.9AI score0.0028EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/07 12:00 a.m.•6 views

CVE-2023-49221: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 could allow a remote attacker within the local network to bypass security restrictions, and access the service menu, because there is a hard-coded service code...

7.8CVSS6AI score0.00196EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/07 12:00 a.m.•9 views

CVE-2023-49222: Use of Hard-coded Credentials

Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker could exploit this to gain root privileges...

8.8CVSS5.8AI score0.00317EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/07 12:00 a.m.•9 views

CVE-2023-49223: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...

8.8CVSS5.9AI score0.00322EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/06/07 12:00 a.m.•45 views

Dell PowerScale OneFS Trust Management Issue Vulnerability (CNVD-2024-29346)

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS has a trust management issue vulnerability that stems from the presence of the use of hard-coded credentials, which can be exploited by an...

8.1CVSS6.6AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/04 1:15 p.m.•35 views

CVE-2024-29170

Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...

8.1CVSS7.8AI score0.00263EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/04 1:15 p.m.•14 views

CVE-2024-29170

Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...

8.1CVSS5.8AI score0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/04 12:11 p.m.•27 views

CVE-2024-29170

Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...

8.1CVSS6.8AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/04 12:11 p.m.•41 views

CVE-2024-29170

Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...

8.1CVSS7.8AI score0.00263EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/04 12:00 a.m.•15 views

PT-2024-22778 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.8.0.x Description: The issue concerns a use of hard-coded credentials, which could be exploited by an adjacent network unauthenticated attacker. This could lead to information disclosure of netwo...

8.1CVSS7.2AI score0.00263EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/04 12:00 a.m.•17 views

Dell PowerScale OneFS Trust Management Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS has a trust management issue vulnerability that stems from the presence of the use of hard-coded credentials, which can be exploited by an...

8.1CVSS6.3AI score0.00263EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/04 12:00 a.m.•6 views

CVE-2024-29170: Use of Hard-coded Credentials

Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...

8.1CVSS5.8AI score0.00263EPSS
SaveExploits0References1
Rows per page
Query Builder