Lucene search
+L

10612 matches found

CNVD
CNVD
•added 2020/05/06 12:00 a.m.•11 views

Calibre-Web Authorization Issues Vulnerability

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. An authorization issue vulnerability exists in Calibre-Web version 0.6.6, which stems from the program's use of a hard-coded secret key that can be exploited by an attacker to bypass...

9.8CVSS6.9AI score0.01368EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/05/06 12:00 a.m.•17 views

PT-2020-2511 · Cisco · Cisco Firepower User Agent +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower User Agent Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software that could allow ...

10CVSS7.3AI score0.00959EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/06 12:00 a.m.•3 views

CVE-2020-3301: Use of Hard-coded Credentials

Multiple vulnerabilities in Cisco Firepower Management Center FMC Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of...

8.1CVSS6.6AI score0.00792EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/05/06 12:00 a.m.•16 views

PT-2020-2510 · Cisco · Cisco Firepower Management Center +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower User Agent Software affected versions not specified Description: The issue concerns multiple vulnerabilities in Cisco Firepower Management Center F...

8.1CVSS7.3AI score0.00792EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/04 12:00 a.m.•4 views

CVE-2020-12110: Use of Hard-coded Credentials

Certain TP-Link devices have a Hardcoded Encryption Key. This affects NC200 2.1.9 build 200225, N210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304...

9.8CVSS8.2AI score0.13566EPSS
SaveExploits6References2
CNVD
CNVD
•added 2020/04/30 12:00 a.m.•16 views

Accellion File Transfer Appliance Trust Management Issues Vulnerability

Accellion File Transfer Appliance is a file transfer appliance from Accellion, USA. The product supports sharing and synchronizing files online using AES 128/256, among other things. A trust management issue vulnerability exists in the Accellion File Transfer Appliance version FTA80540. The...

9.8CVSS6.9AI score0.01101EPSS
SaveExploits0
OSV
OSV
•added 2020/04/29 11:15 p.m.•10 views

CVE-2019-5622

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

9.8CVSS7.3AI score0.01101EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/29 11:15 p.m.•21 views

CVE-2019-5622

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

9.8CVSS9.5AI score0.01101EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/29 11:15 p.m.•22 views

Hardcoded credentials

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

7.5CVSS9.4AI score0.01101EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/04/29 10:15 p.m.•63 views

CVE-2019-5622

CVE-2019-5622 affects Accellion File Transfer Appliance (FTA_8_0_540) and is caused by CWE-798: Use of Hard-coded Credentials. Multiple connected records corroborate a hard-coded/default credential issue in the FTA, implying high impact with potential unauthorized access. The CVSS data (v2/v3) ci...

9.8CVSS9.6AI score0.01101EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/29 10:15 p.m.•37 views

CVE-2019-5622 Accellion File Transfer Appliance Use of Hard-coded Credentials

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

9.6AI score0.01101EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/29 12:00 a.m.•2 views

CVE-2019-5622: Use of Hard-coded Credentials

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

9.8CVSS8.3AI score0.01101EPSS
SaveExploits0References3
OSV
OSV
•added 2020/04/28 5:15 p.m.•11 views

CVE-2016-11058

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...

7.5CVSS5.8AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/28 12:00 a.m.•3 views

CVE-2016-11058: Insufficient Session Expiration

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...

7.5CVSS7.3AI score0.01217EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/27 12:00 a.m.•3 views

CVE-2020-10996: Use of Hard-coded Credentials

An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transitionkey for SST processes in place of the random key expected...

8.1CVSS7.5AI score0.0154EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/23 12:00 a.m.•2 views

CVE-2018-21137: Use of Hard-coded Credentials

Certain NETGEAR devices are affected by a hardcoded password. This affects D3600 before 1.0.0.76 and D6000 before 1.0.0.76...

9.8CVSS7.8AI score0.01443EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/04/22 12:00 a.m.•15 views

HCL Technologies AppScan Enterprise Trust Management Issue Vulnerability

HCL Technologies AppScan is a suite of dynamic analysis testing tools from HCL Technologies, India, which is primarily used for web security testing. A security vulnerability exists in HCL Technologies AppScan Enterprise 9.0.3.14 and earlier versions, which stems from the product's use of...

7.5CVSS6.8AI score0.01015EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/21 7:15 p.m.•10 views

CVE-2019-4327

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

7.5CVSS7.1AI score
SaveExploits0References1
NVD
NVD
•added 2020/04/21 7:15 p.m.•36 views

CVE-2019-4327

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

7.5CVSS7.5AI score0.01015EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/21 7:15 p.m.•27 views

Hardcoded credentials

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

5CVSS7.5AI score0.01015EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder