Lucene search
+L

5904 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•7 views

CVE-2023-51588: Use of Hard-coded Credentials

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to execute...

7.8CVSS6.5AI score0.00234EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•4 views

CVE-2023-34284: Use of Hard-coded Credentials

NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

6.3CVSS5.9AI score0.00447EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•6 views

CVE-2023-39458: Use of Hard-coded Credentials

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit th...

5.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•4 views

CVE-2023-35724: Use of Hard-coded Credentials

D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specif...

8.8CVSS5.9AI score0.00948EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•22 views

D-Link D-View 安全漏洞

D-Link D-View is a web-based design network device management software from China's Terasic D-Link. A security vulnerability exists in D-Link D-View, which originates from InstallApplication's use of hard-coded credentials authentication bypass vulnerability...

9.8CVSS9.7AI score0.02541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•5 views

CVE-2023-32145: Use of Hard-coded Password

D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

8.8CVSS5.9AI score0.00916EPSS
SaveExploits0References1
ICS
ICS
•added 2024/05/02 6:00 a.m.•127 views

CyberPower PowerPanel Business

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/Low attack complexity Vendor: CyberPower Equipment: PowerPanel business Vulnerabilities: Use of Hard-coded Password, Relative Path Traversal, Use of Hard-coded Credentials, Active Debug Code, Storing Passwords in a...

9.8CVSS8.8AI score0.00713EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/05/02 12:00 a.m.•19 views

PT-2024-3235 · Cyberpower · Cyberpower Powerpanel

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel affected versions not specified Description: The issue is related to hard-coded credentials for the test server found in the production code, which could allow an attacker to gain access to the testing or production...

9.8CVSS6.9AI score0.00513EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/05/02 12:00 a.m.•32 views

PT-2024-3242 · Cyberpower · Cyberpower Powerpanel

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel business application affected versions not specified Description: The issue is related to a hard-coded set of authentication credentials in the CyberPower PowerPanel business application code. This could allow an attacke...

10CVSS7.3AI score0.00564EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/02 12:00 a.m.•3 views

CVE-2024-3544: Use of Hard-coded Credentials

Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster group. This vulnerability has been closed by enhancing LoadMaster partner communications to require a shared secret th...

7.5CVSS5.7AI score0.00379EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/02 12:00 a.m.•29 views

PT-2024-3240 · Cyberpower · Cyberpower Powerpanel

Name of the Vulnerable Software and Affected Versions: CyberPower PowerPanel affected versions not specified Description: The issue is related to hard-coded credentials used by the CyberPower PowerPanel platform for authentication to the database, other services, and the cloud. This could allow a...

10CVSS7AI score0.00474EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•4 views

CVE-2023-52723: Use of Hard-coded Credentials

In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...

7.1CVSS5.8AI score0.00547EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/04/26 12:00 a.m.•44 views

Fortinet FortiClient Hardcoded credentials in vcm2.exe (FG-IR-23-108)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-108 advisory. - A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an...

5.5CVSS6.2AI score0.00205EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/22 12:00 a.m.•10 views

CVE-2024-22813: Use of Hard-coded Credentials

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller...

4.4CVSS5.8AI score0.00385EPSS
SaveExploits0References2
OSV
OSV
•added 2024/04/19 5:15 a.m.•19 views

CVE-2024-29966

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance...

9.8CVSS5.8AI score0.0065EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/19 5:15 a.m.•34 views

CVE-2024-29966

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance...

9.8CVSS7.6AI score0.0065EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/19 4:53 a.m.•28 views

CVE-2024-29966 hard-coded credentials in the documentation that appear as the appliance root password

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance...

7.5CVSS7.1AI score0.0065EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/19 4:53 a.m.•137 views

CVE-2024-29966

CVE-2024-29966 affects Brocade SANnav OVA images prior to 2.3.1 and 2.3.0a where hard-coded credentials are documented as the appliance root password. This could allow an unauthenticated attacker full access to the SANnav appliance. Root cause: credentials documented in install/maintenance materi...

9.8CVSS8.5AI score0.0065EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/04/19 4:53 a.m.•45 views

CVE-2024-29966 hard-coded credentials in the documentation that appear as the appliance root password

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance...

7.5CVSS7.7AI score0.0065EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/19 12:00 a.m.•5 views

CVE-2024-29966: Use of Hard-coded Credentials

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance...

9.8CVSS6AI score0.0065EPSS
SaveExploits0References3
Rows per page
Query Builder