Lucene search
+L

5923 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/03 12:00 a.m.•2 views

CVE-2023-37608: Use of Hard-coded Credentials

An issue in Automatic Systems SOC FL9600 FirstLane V06 legoT04E00 allows a remote attacker to obtain sensitive information because there is an automaticsystems super admin account with astech as its hardcoded password...

7.5CVSS7.3AI score0.00857EPSS
SaveExploits4References4
osv_cve
osv_cve
•added 2023/12/28 4:15 a.m.•16 views

CVE-2023-49228

An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root...

6.4CVSS6AI score0.00473EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/12/28 4:15 a.m.•14 views

CVE-2023-49228

An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root...

6.4CVSS6.1AI score0.00473EPSS
SaveExploits1References3
NVD
NVD
•added 2023/12/28 4:15 a.m.•45 views

CVE-2023-49228

An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root...

6.4CVSS0.00473EPSS
SaveExploits1References2
CVE
CVE
•added 2023/12/28 12:00 a.m.•62 views

CVE-2023-49228

Peplink Balance Two before 8.4.0 is affected. The vulnerability is in the console port authentication which uses hard-coded credentials, enabling a physically proximate attacker to execute arbitrary commands as root. Remediation: upgrade to version 8.4.0 or later; as a workaround, restrict physic...

6.4CVSS6.8AI score0.00473EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•7 views

CVE-2023-49228: Use of Hard-coded Credentials

An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root...

6.4CVSS7.1AI score0.00473EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/12/28 12:00 a.m.•26 views

Peplink Balance Security Breach

Peplink Balance is a router from Peplink. A security vulnerability exists in Peplink Balance Two versions prior to 8.4.0, which stems from the use of hard-coded credentials for Console port authentication, allowing an attacker to execute arbitrary commands as root...

6.4CVSS7.5AI score0.00473EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/27 12:00 a.m.•6 views

CVE-2023-46918: Use of Hard-coded Credentials

Phlox com.phlox.simpleserver.plus aka Simple HTTP Server PLUS 1.8.1-plus has an Android manifest file that contains an entry with the android:allowBackup attribute set to true. This could be leveraged by an attacker with physical access to the device...

4.6CVSS6.4AI score0.00292EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/26 12:00 a.m.•6 views

CVE-2023-46711: Use of Hard-coded Credentials

VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user...

4.6CVSS6AI score0.00231EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/25 12:00 a.m.•8 views

CVE-2023-40236: Use of Hard-coded Credentials

In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authentication bypass...

5.3CVSS6AI score0.00387EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/12/20 1:15 a.m.•21 views

CVE-2023-47704

IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220...

7.5CVSS5.8AI score0.00609EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•6 views

CVE-2023-47704: Use of Hard-coded Credentials

IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220...

7.5CVSS7.3AI score0.00609EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•23 views

(0Day) Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.4AI score0.00234EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•10 views

CVE-2023-43870: Use of Hard-coded Credentials

When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could access the installer batch file or reverse engineer the source code to gain access to the root certificate password. Using the root certificate and password they could then create...

9.8CVSS8.1AI score0.00404EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/12/19 12:00 a.m.•22 views

PT-2023-30577 · Ibm · Ibm Security Guardium Key Lifecycle Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Key Lifecycle Manager version 4.2 IBM Security Guardium Key Lifecycle Manager version 4.3 Description: The issue concerns the presence of plain text hard-coded credentials or other secrets in the source code repository o...

7.5CVSS7.4AI score0.00609EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/12/19 12:00 a.m.•22 views

IBM Security Guardium Trust Management Issues Vulnerabilities

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as customized UI, report management and streamlined audit process building. A trust management issue vulnerability exists in IBM...

7.5CVSS6.7AI score0.00609EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/16 12:00 a.m.•25 views

PT-2023-9163 · Ibm · Ibm Storage Fusion Hci

Name of the Vulnerable Software and Affected Versions: IBM Storage Fusion HCI versions 2.1.0 through 2.6.1 Description: The issue concerns the use of hard-coded credentials, such as a password or cryptographic key, which the software uses for its own inbound authentication, outbound communication...

9.8CVSS9.4AI score0.00497EPSS
SaveExploits0References11
osv_cve
osv_cve
•added 2023/12/15 9:15 a.m.•20 views

CVE-2023-48388

Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

9.8CVSS5.9AI score0.00926EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/15 9:15 a.m.•23 views

CVE-2023-48388

Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

9.8CVSS0.00926EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/15 9:15 a.m.•28 views

Hardcoded credentials

Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

7.5CVSS7.4AI score0.00926EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder