Lucene search
+L

1161 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 4:12 p.m.13 views

CVE-2020-12035

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings...

4.9CVSS7AI score0.00247EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 11:19 a.m.13 views

CVE-2013-6236

IZON IP 2.0.2: hard-coded password vulnerability...

10CVSS7AI score0.10207EPSS
SaveExploits6References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:09 a.m.12 views

CVE-2019-19017

An issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root password set during installation. An attacker could utilize this to gain root privileges on the system...

9.3CVSS7.3AI score0.01125EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:39 a.m.12 views

CVE-2019-3932

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use this vulnerability to control external devices via the uartbridge...

9.8CVSS7.6AI score0.36325EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:01 a.m.17 views

CVE-2019-10979

SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password...

9.8CVSS6.9AI score0.0286EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:16 a.m.10 views

CVE-2019-13466

Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” archive is protected with a hard-coded password. An application update that addresses the protection of archive encryption is available...

7.5CVSS7AI score0.00661EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:46 a.m.14 views

CVE-2018-25069

A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability...

9.8CVSS7AI score0.00863EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:30 a.m.12 views

CVE-2014-125030

A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected by this issue is some unknown functionality. The manipulation leads to use of hard-coded password. The patch is identified as 557e177d8a309d6f0f26de46efb38d43e000852d. It is recommended to apply a pat...

9.8CVSS6.9AI score0.00876EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/02 6:31 a.m.31 views

CVE-2025-2402

A hard-coded, non-random password for the object store minio of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and manipulate in- and output data of active jobs. It...

8.8CVSS7.5AI score0.00377EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/31 7:15 a.m.18 views

CVE-2025-2402

A hard-coded, non-random password for the object store minio of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and manipulate in- and output data of active jobs. It...

8.6CVSS5.8AI score0.00377EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/31 7:15 a.m.42 views

CVE-2025-2402

A hard-coded, non-random password for the object store minio of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and manipulate in- and output data of active jobs. It...

8.8CVSS0.00377EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/31 6:11 a.m.49 views

CVE-2025-2402 Hard-coded password for object store of KNIME Business Hub

A hard-coded, non-random password for the object store minio of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and manipulate in- and output data of active jobs. It...

8.8CVSS0.00377EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/31 6:11 a.m.71 views

CVE-2025-2402

CVE-2025-2402 affects KNIME Business Hub. A hard-coded, non-random password for the object store (MinIO) in all versions except the listed fixes enables an unauthenticated attacker to read/manipulate swapped jobs or in/out data of active jobs, and can cause a denial-of-service by writing large da...

8.8CVSS7.5AI score0.00377EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/31 6:11 a.m.6 views

CVE-2025-2402 Hard-coded password for object store of KNIME Business Hub

A hard-coded, non-random password for the object store minio of KNIME Business Hub in all versions except the ones listed below allows an unauthenticated remote attacker in possession of the password to read and manipulate swapped jobs or read and manipulate in- and output data of active jobs. It...

8.8CVSS6.9AI score0.00377EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/22 6:09 p.m.25 views

CVE-2025-2555

A vulnerability classified as problematic has been found in Audi Universal Traffic Recorder App 2.0. Affected is an unknown function of the component FTP Credentials. The manipulation leads to use of hard-coded password. Attacking locally is a requirement. The complexity of an attack is rather...

2.9CVSS6.9AI score0.00181EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/20 6:15 p.m.24 views

CVE-2025-2555

A vulnerability classified as problematic has been found in Audi Universal Traffic Recorder App 2.0. Affected is an unknown function of the component FTP Credentials. The manipulation leads to use of hard-coded password. Attacking locally is a requirement. The complexity of an attack is rather...

2.9CVSS0.00181EPSS
SaveExploits0References4
CVE
CVE
added 2025/03/20 6:00 p.m.59 views

CVE-2025-2555

Audi Universal Traffic Recorder App 2.0 is affected by CVE-2025-2555 due to a hard-coded password in the FTP Credentials component. The issue enables local attack exploitation; attack complexity is high and exploitation is disclosed publicly. Upgrading to version 2.89 (new customers) or 2.90 (exi...

2.9CVSS6.8AI score0.00181EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/03/20 6:00 p.m.34 views

CVE-2025-2555 Audi Universal Traffic Recorder App FTP Credentials hard-coded password

A vulnerability classified as problematic has been found in Audi Universal Traffic Recorder App 2.0. Affected is an unknown function of the component FTP Credentials. The manipulation leads to use of hard-coded password. Attacking locally is a requirement. The complexity of an attack is rather...

2.9CVSS0.00181EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/03/19 6:18 p.m.11 views

CVE-2024-48831

Dell SmartFabric OS10 Software, versions 10.5.6.x, contains a Use of Hard-coded Password vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

8.4CVSS7.1AI score0.00165EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/17 6:15 p.m.14 views

CVE-2024-48831

Dell SmartFabric OS10 Software, versions 10.5.6.x, contains a Use of Hard-coded Password vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

8.4CVSS0.00165EPSS
SaveExploits0References1
Rows per page
Query Builder