Lucene search
+L

10521 matches found

NVD
NVD
•added 2020/02/12 4:15 p.m.•41 views

CVE-2013-6236

IZON IP 2.0.2: hard-coded password vulnerability...

10CVSS9.6AI score0.10207EPSS
SaveExploits6References3
CVE
CVE
•added 2020/02/12 3:46 p.m.•80 views

CVE-2013-6236

CVE-2013-6236 affects Stem Innovation IZON IP cameras (Firmware 2.0.2). The vulnerability arises from hard-coded credentials in the device’s Linux distribution and hidden web application, enabling unauthenticated access to the camera via Telnet/HTTP and exposing streams and configuration data. Po...

10CVSS9.4AI score0.10207EPSS
SaveExploits6References3Affected Software1
Cvelist
Cvelist
•added 2020/02/12 3:46 p.m.•47 views

CVE-2013-6236

IZON IP 2.0.2: hard-coded password vulnerability...

9.6AI score0.10207EPSS
SaveExploits6References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/12 12:00 a.m.•2 views

CVE-2013-6236: Use of Hard-coded Credentials

IZON IP 2.0.2: hard-coded password vulnerability...

10CVSS8.2AI score0.10207EPSS
SaveExploits6References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/10 12:00 a.m.•1 views

CVE-2012-6611: Use of Hard-coded Credentials

An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14.g3. It has a blank administrative password by default, and can be successfully used without setting this password...

10CVSS8.1AI score0.03143EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/08 12:00 a.m.•1 views

CVE-2012-4381: Use of Hard-coded Credentials

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, 1 which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, 2 when an authentication plugin returns a false in the strict function, could allow remo...

9.3CVSS7.4AI score0.04061EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/06 12:00 a.m.•0 views

CVE-2020-8657: Use of Hard-coded Credentials

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key hardcoded as EONAPIKEY in include/apifunctions.php for API version 2.4.2 by default for all installations, hence allowing an attacker to calculate/guess the admin access token...

9.8CVSS8.1AI score0.91874EPSS
SaveExploits4References2
OSV
OSV
•added 2020/02/04 5:15 p.m.•13 views

CVE-2019-4675

IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 171511...

9.8CVSS6.8AI score0.0128EPSS
SaveExploits0References2
NVD
NVD
•added 2020/02/04 5:15 p.m.•30 views

CVE-2019-4675

IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 171511...

9.8CVSS7.2AI score0.0128EPSS
SaveExploits0References2
CVE
CVE
•added 2020/02/04 4:45 p.m.•57 views

CVE-2019-4675

CVE-2019-4675 affects IBM Security Identity Manager 7.0.1, where the component contains hard-coded credentials used for its own inbound authentication, outbound communication to external components, or encryption of internal data. The root cause is the presence of embedded credentials in ISIM ver...

9.8CVSS9AI score0.0128EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/02/04 4:45 p.m.•34 views

CVE-2019-4675

IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 171511...

6.8CVSS9AI score0.0128EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/04 12:00 a.m.•1 views

CVE-2019-4675: Use of Hard-coded Credentials

IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 171511...

9.8CVSS7AI score0.0128EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/02/04 12:00 a.m.•152 views

Opencast < 7.6.0 and 8.0.0 Multiple Vulnerabilities

Opencast is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS7.2AI score0.01293EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
•added 2020/02/03 6:50 p.m.•168 views

Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities (CVE-2019-4674, CVE-2018-15473, CVE-2019-4675)

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerabilities due to a remote attacker, user enumeration vulnerability, and hard-coded credentials. Vulnerability Details CVEID: CVE-2019-4674 DESCRIPTION: IBM Security Identity Manager could allow a...

9.8CVSS1.8AI score0.98631EPSS
SaveExploits26Affected Software1
Veracode
Veracode
•added 2020/01/31 9:23 a.m.•26 views

Harded Coded Remember-Me Cookie

Opencast uses a harded coded remember-me cookie. The remember-me cookie is created by hashing the username, password, and an additional system key, allowing anyone with an access to the remember-me token for one server to compromise all servers using the same credentials...

8.8CVSS3.5AI score0.00939EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/01/30 9:21 p.m.•76 views

Hard-Coded Key Used For Remember-me Token in Opencast

Impact The security configuration in etc/security/mhdefaultorg.xml enables a remember-me cookie based on a hash created from the username, password, and an additional system key. Opencast has hard-coded this system key in the large XML file and never mentions to change this, basically ensuring th...

8.8CVSS0.6AI score0.00939EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2020/01/30 8:50 p.m.•49 views

CVE-2020-5222 Hard-Coded Key Used For Remember-me Token in OpenCast

Opencast before 7.6 and 8.1 enables a remember-me cookie based on a hash created from the username, password, and an additional system key. This means that an attacker getting access to a remember-me token for one server can get access to all servers which allow log-in using the same credentials...

6.8CVSS8.5AI score0.00939EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/30 12:00 a.m.•0 views

CVE-2020-5222: Use of Hard-coded Credentials

Opencast before 7.6 and 8.1 enables a remember-me cookie based on a hash created from the username, password, and an additional system key. This means that an attacker getting access to a remember-me token for one server can get access to all servers which allow log-in using the same credentials...

8.8CVSS7.8AI score0.00939EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/30 12:00 a.m.•3 views

CVE-2013-1352: Use of Hard-coded Credentials

Verax NMS prior to 2.1.0 uses an encryption key that is hardcoded in a JAR archive...

7.5CVSS6.5AI score0.01307EPSS
SaveExploits1References2
NVD
NVD
•added 2020/01/29 7:15 p.m.•35 views

CVE-2013-2572

A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, which could let a malicious user obtain unauthorized access to CGI files...

7.5CVSS7.4AI score0.16432EPSS
SaveExploits6References5
Rows per page
Query Builder