Lucene search
+L

8459 matches found

OSV
OSV
added 2021/04/08 6:15 p.m.8 views

CVE-2020-14099

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

7.5CVSS7.1AI score0.006EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/04/08 5:52 p.m.34 views

CVE-2020-14099

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

7.4AI score0.006EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/08 12:00 a.m.11 views

Xiaomi router AX1800 信任管理问题漏洞

Xiaomi router AX1800 is a router from China-based Xiaomi. A security vulnerability exists in Xiaomi router AX1800 rom version prior to 1.0.336 and RM1800 root version prior to 1.0.26, which stems from the encryption scheme of the user's backup file using a hard-coded key...

7.5CVSS7.3AI score0.006EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/30 6:15 p.m.10 views

CVE-2021-26579

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5CVSS6.1AI score0.00211EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/30 6:15 p.m.22 views

CVE-2021-26579

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5CVSS0.00211EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/30 6:15 p.m.25 views

Hardcoded credentials

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

2.1CVSS5.2AI score0.00211EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/30 5:27 p.m.35 views

CVE-2021-26579

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5AI score0.00211EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/30 5:27 p.m.94 views

CVE-2021-26579

CVE-2021-26579 describes a vulnerability in HPE Unified Data Management (UDM) where a hard-coded cryptographic key in the product can lead to local disclosure of privileged information (CWE-321). The issue is addressed by HPE in UDM versions, with updates to 1.2009.0 and 1.2101.0, and a cleanup i...

5.5CVSS5.2AI score0.00211EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/03/30 12:00 a.m.14 views

HPE Unified Data Management 信任管理问题漏洞

HPE Unified Data Management is a software application from HPE America. It provides a management function. A security vulnerability exists in HPE Unified Data Management that originates from a hard-coded encryption key that allows local disclosure of privileged information...

5.5CVSS5.7AI score0.00211EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/03/29 12:00 a.m.16 views

MobileIron agents 信任管理问题漏洞

MobileIron agents is a software application from MobileIron, Inc. It is used for MobileIron agents. A trust management issue vulnerability exists in versions of MobileIron agents prior to 2021-03-22, which stems from the inclusion of a hard-coded API key used to communicate with the MobileIron Sa...

7.5CVSS7.3AI score0.01556EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/03/29 12:00 a.m.14 views

MobileIron agents 信任管理问题漏洞

MobileIron agents is an application from MobileIron USA. It is used for MobileIron agents. MobileIron agents versions 2021-03-22 and earlier are vulnerable to a trust management issue that stems from the inclusion of a hard-coded encryption key that is used to encrypt the submission of...

9.8CVSS5.6AI score0.01186EPSS
SaveExploits1References6
OSV
OSV
added 2021/03/25 8:15 p.m.9 views

CVE-2021-27452

The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E all firmware versions prior to v04A00.1...

7.8CVSS7.1AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/25 8:15 p.m.36 views

CVE-2021-27452

The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E all firmware versions prior to v04A00.1...

7.8CVSS0.00263EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/25 8:15 p.m.30 views

CVE-2021-27440

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

9.8CVSS0.01351EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/25 8:15 p.m.12 views

CVE-2021-27438

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

8.8CVSS5.8AI score0.01211EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/25 8:15 p.m.23 views

CVE-2021-27438

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

8.8CVSS0.01211EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/25 8:15 p.m.11 views

CVE-2021-27440

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

9.8CVSS7.3AI score0.01351EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/25 8:15 p.m.22 views

Hardcoded credentials

The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E all firmware versions prior to v04A00.1...

7.2CVSS7.7AI score0.00263EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/25 8:15 p.m.6 views

CVE-2021-27438

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

8.8CVSS8AI score0.01211EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/03/25 8:15 p.m.7 views

CVE-2021-27440

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

9.8CVSS8.4AI score0.01351EPSS
SaveExploits0References2
Rows per page
Query Builder