Lucene search
K

3819 matches found

NVD
NVD
added 2024/11/29 5:15 p.m.14 views

CVE-2024-49805

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.8CVSS0.00324EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/29 4:53 p.m.25 views

CVE-2024-49806 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS6.9AI score0.00311EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/29 4:53 p.m.23 views

CVE-2024-49806 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS0.00311EPSS
Exploits0References1
CVE
CVE
added 2024/11/29 4:53 p.m.54 views

CVE-2024-49806

CVE-2024-49806 affects IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8. The root cause is hard-coded credentials used for inbound authentication, outbound communication, or internal data encryption. Impact is high on confidentiality, integrity, and availability; CVSS base scor...

9.8CVSS9.3AI score0.00311EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/29 4:52 p.m.18 views

CVE-2024-49805 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS6.9AI score0.00324EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/29 4:52 p.m.22 views

CVE-2024-49805 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS0.00324EPSS
Exploits0References1
CVE
CVE
added 2024/11/29 4:52 p.m.68 views

CVE-2024-49805

IBM Security Verify Access Appliance (ISVA) versions 10.0.0–10.0.8 contain hard-coded credentials used for inbound authentication, outbound communications, or internal data encryption. Root cause: credential exposure within the appliance. Impact in the public reports ranges from high confidential...

9.8CVSS9.3AI score0.00324EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/29 12:0 a.m.2 views

IBM Security Verify Access 信任管理问题漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

9.8CVSS9AI score0.00324EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/29 12:0 a.m.4 views

PT-2024-33690 · Ibm · Ibm Security Verify Access Appliance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8 Description: The issue concerns the presence of hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to...

9.8CVSS7.2AI score0.00324EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/11/29 12:0 a.m.3 views

PT-2024-33691 · Ibm · Ibm Security Verify Access Appliance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8 Description: The issue concerns hard-coded credentials, such as a password or cryptographic key, used by the appliance for its own inbound authentication, outbound...

9.8CVSS7AI score0.00311EPSS
Exploits0References6
GithubExploit
GithubExploit
added 2024/11/27 11:19 a.m.432 views

Exploit for Use of Hard-coded Credentials in Mariazevedo88 Travels-Java-Api

PoC Authentication Bypass MFA Really Simple Security WordPress...

9.8CVSS7.1AI score0.81722EPSS
Exploits22
Vulnrichment
Vulnrichment
added 2024/11/26 10:57 a.m.15 views

CVE-2024-50377

A CWE-798 "Use of Hard-coded Credentials" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability is associated to the backup configuration functionality that by default encrypts the...

6.5CVSS7.2AI score0.00187EPSS
Exploits0References1
CVE
CVE
added 2024/11/26 10:57 a.m.54 views

CVE-2024-50377

CVE-2024-50377 affects Advantech EKI-6333AC-2G (≤1.6.3), EKI-6333AC-2GD (≤1.6.3), and EKI-6333AC-1GPO (≤1.2.1). The issue is a CWE-798 “Use of Hard-coded Credentials” in the backup configuration functionality, where archives are encrypted with a static password. This could allow an attacker with ...

6.5CVSS6.7AI score0.00187EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/26 12:0 a.m.3 views

Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞

The Advantech EKI-6333AC-2G and Advantech EKI-6333AC-2GD are both industrial-grade wireless access points APs from Advantech, China. A security vulnerability exists in the Advantech EKI-6333AC-2G version 1.6.3 and earlier, EKI-6333AC-2GD version v1.6.3 and earlier, and EKI-6333AC-1GPO version...

6.5CVSS6.8AI score0.00187EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/26 12:0 a.m.3 views

PT-2024-34167 · Advantech · Advantech Eki-6333Ac-2G +1

Name of the Vulnerable Software and Affected Versions: Advantech EKI-6333AC-2G versions 1.6.3 and earlier Advantech EKI-6333AC-2GD versions 1.6.3 and earlier Advantech EKI-6333AC-1GPO versions 1.2.1 and earlier Description: A hard-coded credentials issue affects the backup configuration...

6.5CVSS7.3AI score0.00187EPSS
Exploits0References3
NVD
NVD
added 2024/11/22 10:15 p.m.12 views

CVE-2024-11630

A vulnerability has been found in E-Lins H685, H685f, H700, H720, H750, H820, H820Q, H820Q0 and H900 up to 3.2 and classified as critical. This vulnerability affects unknown code of the component OEM Backend. The manipulation leads to hard-coded credentials. The attack can be initiated remotely...

7.5CVSS0.00613EPSS
Exploits0References4
CVE
CVE
added 2024/11/22 10:0 p.m.39 views

CVE-2024-11630

CVE-2024-11630 affects E-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 devices (up to firmware 3.2) due to hard-coded credentials in the OEM Backend component. The issue enables remote exploitation with no user interaction required; the vulnerability has been disclosed and attackers may l...

7.5CVSS7.2AI score0.00613EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/11/22 10:0 p.m.13 views

CVE-2024-11630 E-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials

A vulnerability has been found in E-Lins H685, H685f, H700, H720, H750, H820, H820Q, H820Q0 and H900 up to 3.2 and classified as critical. This vulnerability affects unknown code of the component OEM Backend. The manipulation leads to hard-coded credentials. The attack can be initiated remotely...

7.5CVSS6.9AI score0.00613EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/11/22 10:0 p.m.19 views

CVE-2024-11630 E-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials

A vulnerability has been found in E-Lins H685, H685f, H700, H720, H750, H820, H820Q, H820Q0 and H900 up to 3.2 and classified as critical. This vulnerability affects unknown code of the component OEM Backend. The manipulation leads to hard-coded credentials. The attack can be initiated remotely...

7.5CVSS0.00613EPSS
Exploits0References4
NVD
NVD
added 2024/11/22 8:15 p.m.6 views

CVE-2023-51638

Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a...

9.8CVSS0.01323EPSS
Exploits0References2
Rows per page
Query Builder