Lucene search
K

3819 matches found

NVD
NVD
added 2021/12/27 7:15 p.m.20 views

CVE-2021-35232

Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users ...

6.8CVSS0.003EPSS
Exploits0References2
Prion
Prion
added 2021/12/27 7:15 p.m.16 views

Hardcoded credentials

IntelliBridge EC 40 and 60 Hub C.00.04 and prior contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

5.8CVSS8.8AI score0.00272EPSS
Exploits0References1Affected Software2
Prion
Prion
added 2021/12/27 7:15 p.m.10 views

Hardcoded credentials

Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users ...

3.6CVSS6.6AI score0.003EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2021/12/27 7:15 p.m.15 views

Hardcoded credentials

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX PIC iX Versions B.02, C.02, and C.03...

2.1CVSS5.8AI score0.00213EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/12/27 6:48 p.m.61 views

CVE-2021-32993

The CVE-2021-32993 issue affects Philips IntelliBridge EC 40 Hub (C.00.04 and prior) and EC 80 Hub (C.00.04 and prior). The vulnerability arises from hard-coded credentials used for inbound authentication, outbound communication to external components, or encryption of internal data (CWE-798). Re...

8.8CVSS8.6AI score0.00272EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/27 6:48 p.m.14 views

CVE-2021-32993 Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials

IntelliBridge EC 40 and 60 Hub C.00.04 and prior contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

8.1CVSS9AI score0.00272EPSS
Exploits0References1
CVE
CVE
added 2021/12/27 6:48 p.m.74 views

CVE-2021-35232

CVE-2021-35232 affects SolarWinds Web Help Desk versions up to and including 12.7.6. It arises from hard-coded credentials that permit a local attacker with access to the Web Help Desk host to execute arbitrary HQL queries against the database, enabling theft of user password hashes or insertion ...

6.8CVSS6.6AI score0.003EPSS
In wildExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/12/27 6:48 p.m.23 views

CVE-2021-35232 Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries

Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users ...

6.8CVSS7.1AI score0.003EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/12/27 12:0 a.m.5 views

PT-2021-20854 · Solarwinds · Solarwinds Web Help Desk

Name of the Vulnerable Software and Affected Versions: SolarWinds Web Help Desk affected versions not specified Description: A security issue has been discovered in the SolarWinds Web Help Desk product, where hard-coded credentials allow an attacker with local access to the host machine to execut...

6.8CVSS7.7AI score0.003EPSS
Exploits0References6
CNNVD
CNNVD
added 2021/12/27 12:0 a.m.2 views

Solarwinds Web Help Desk 信任管理问题漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and other features. SolarWinds Web Help Desk suffers from a trust management issue vulnerability...

6.8CVSS6.6AI score0.003EPSS
Exploits0References3
OSV
OSV
added 2021/12/21 6:15 p.m.4 views

CVE-2021-44207

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials...

8.1CVSS5.8AI score0.17578EPSS
Exploits0References3
NVD
NVD
added 2021/12/21 6:15 p.m.10 views

CVE-2021-44207

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials...

8.1CVSS0.17578EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2021/12/21 5:45 p.m.9 views

CVE-2021-44207

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials...

7AI score0.17578EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/12/21 5:45 p.m.17 views

CVE-2021-44207

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials...

8.3AI score0.17578EPSS
Exploits0References2
CVE
CVE
added 2021/12/21 5:45 p.m.205 views

CVE-2021-44207

CVE-2021-44207 affects Acclaim USAHERDS (version 7.4.0.1 and earlier) due to hard-coded credentials, enabling potential unauthorized access and remote code execution as described by multiple sources. Public docs confirm the issue center is use of hard-coded credentials in USAHERDS, with CVSS metr...

8.1CVSS8.9AI score0.17578EPSS
In wildExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/12/21 12:0 a.m.2 views

Acclaim USAHERDS 信任管理问题漏洞

Acclaim Systems Acclaim Usaherds is an Animal Health Emergency Reporting Diagnostic System from Acclaim Systems USA. A security vulnerability exists in Acclaim USAHERDS version 7.4.0.1 and prior versions that stems from the presence of hard-coded credentials in the program...

8.1CVSS8AI score0.17578EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/12/21 12:0 a.m.4 views

PT-2021-24065

Name of the Vulnerable Software and Affected Versions: Acclaim USAHERDS versions 7.4.0.1 and earlier Description: The issue concerns the use of hard-coded credentials in Acclaim USAHERDS, allowing attackers to bypass authentication and gain unauthorized access to sensitive systems and data. This...

8.1CVSS8.6AI score0.17578EPSS
Exploits0References46
ATTACKERKB
ATTACKERKB
added 2021/12/21 12:0 a.m.13 views

CVE-2021-44207

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

8.1CVSS7.3AI score0.17578EPSS
In wildExploits0References3
ICS
ICS
added 2021/12/21 12:0 a.m.94 views

Fresenius Kabi Agilia Connect Infusion System (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Fresenius Kabi Equipment: Agilia Connect Infusion System Vulnerabilities: Uncontrolled Resource Consumption, Use of a Broken or Risky Cryptographic Algorithm, Insufficiently Protected Credentials,...

9.8CVSS8.7AI score0.0107EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/12/16 12:0 a.m.3 views

Xylem AquaView 信任管理问题漏洞

Xylem AquaView is a next-generation SCADA system from Xylem USA, Inc. to meet the needs of water and wastewater related professionals for a simpler, more personalized way to be able to monitor, control, and optimize their assets anytime, anywhere, from any device. A trust management issue...

9.3CVSS7.9AI score0.00208EPSS
Exploits0References6
Rows per page
Query Builder