Lucene search
+L

8245 matches found

CNNVD
CNNVD
added 2025/03/20 12:0 a.m.10 views

Esri ArcGIS Enterprise 信任管理问题漏洞

Esri Portal for ArcGIS is a Web-based geographic information system GIS platform. A hard-coded credentials vulnerability exists in Esri Portal for ArcGIS, which can be exploited by an attacker to gain administrative access to the system...

9.8CVSS6.8AI score0.0054EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/03/19 6:18 p.m.9 views

CVE-2024-48831

Dell SmartFabric OS10 Software, versions 10.5.6.x, contains a Use of Hard-coded Password vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

8.4CVSS7.1AI score0.00164EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/03/19 1:17 p.m.13 views

CVE-2019-17659

A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from another installation or a firmware image...

8.1CVSS7.1AI score0.00623EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/19 1:16 p.m.12 views

CVE-2024-54027

A Use of Hard-coded Cryptographic Key vulnerability CWE-321 in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, version 3.1.5 and below, version 3.0.7 to 3.0.5 may allow a privileged attacker with super-admin profile and CLI access t...

8.2CVSS6.6AI score0.00148EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/18 6:27 p.m.24 views

CVE-2025-2343

A vulnerability classified as critical was found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. Affected by this vulnerability is an unknown functionality of the component Device Pairing. The manipulation leads to hard-coded credentials. Access to the local network is required for this atta...

7.7CVSS6.6AI score0.00352EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/18 4:25 p.m.32 views

CVE-2025-2342

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.9CVSS7AI score0.00426EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/18 12:0 a.m.8 views

IROAD APK 安全漏洞

The IROAD APK is a mobile application from IROAD that works with the IROAD Car Recorder. A security vulnerability exists in IROAD APK version 5.2.5, which stems from the use of hard-coded credentials on ports 9091 and 9092 in the APK, which could allow an attacker to access the API endpoint and...

6.5CVSS6.2AI score0.00222EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/18 12:0 a.m.7 views

IROAD V Series 安全漏洞

IROAD V Series is a series of car recorders from IROAD. The IROAD V Series suffers from a security vulnerability that stems from the use of hard-coded default credentials in the car recorder, which allows an attacker to connect to the device's network within Wi-Fi range to sniff it...

8.8CVSS6.8AI score0.00261EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/18 12:0 a.m.7 views

ROADCAM X3 安全漏洞

ROADCAM X3 is a car recorder with HD quality and easy to carry by ROADCAM. It is used to record the process of driving, and supports video cropping, sharing and other functions. ROADCAM X3 suffers from a security vulnerability that originates from the inclusion of hard-coded FTP credentials in th...

9.8CVSS6.5AI score0.00413EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/18 12:0 a.m.7 views

Forvia Hella HELLA Driving Recorder DR 820 安全漏洞

Forvia Hella HELLA Driving Recorder DR 820 is a driving recorder from Forvia. A security vulnerability exists in Forvia Hella HELLA Driving Recorder DR 820, which stems from the use of hard-coded credentials on ports 9091 and 9092 in the APK, which allows an attacker to gain unauthorized access t...

9.8CVSS6.9AI score0.00413EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/17 6:15 p.m.12 views

CVE-2024-48831

Dell SmartFabric OS10 Software, versions 10.5.6.x, contains a Use of Hard-coded Password vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

8.4CVSS0.00164EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/17 6:15 p.m.4 views

CVE-2024-48831

Dell SmartFabric OS10 Software, versions 10.5.6.x, contains a Use of Hard-coded Password vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

8.4CVSS5.8AI score0.00164EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/17 6:0 p.m.13 views

CVE-2024-48831

Dell SmartFabric OS10 Software, versions 10.5.6.x, contains a Use of Hard-coded Password vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

8.4CVSS0.00164EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/17 6:0 p.m.51 views

CVE-2024-48831

Summary: CVE-2024-48831 affects Dell SmartFabric OS10 Software, specifically version 10.5.6.x. The vulnerability is a hard-coded password issue that could allow an unauthenticated, local attacker to gain unauthorized access. What’s affected: Dell SmartFabric OS10 (OS10) software; exact impacted b...

8.4CVSS6.9AI score0.00164EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/17 6:0 p.m.10 views

CVE-2024-48831

Dell SmartFabric OS10 Software, versions 10.5.6.x, contains a Use of Hard-coded Password vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

8.4CVSS8.3AI score0.00164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/17 2:23 p.m.13 views

CVE-2025-2322

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is...

7.5CVSS6.5AI score0.00699EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/17 2:15 p.m.6 views

CVE-2024-54027

A Use of Hard-coded Cryptographic Key vulnerability CWE-321 in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, version 3.1.5 and below, version 3.0.7 to 3.0.5 may allow a privileged attacker with super-admin profile and CLI access t...

4.4CVSS5.8AI score0.00148EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/17 2:15 p.m.14 views

CVE-2024-54027

A Use of Hard-coded Cryptographic Key vulnerability CWE-321 in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, version 3.1.5 and below, version 3.0.7 to 3.0.5 may allow a privileged attacker with super-admin profile and CLI access t...

8.2CVSS0.00148EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/03/17 2:15 p.m.3 views

CVE-2024-54027

A Use of Hard-coded Cryptographic Key vulnerability CWE-321 in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, version 3.1.5 and below, version 3.0.7 to 3.0.5 may allow a privileged attacker with super-admin profile and CLI access t...

8.2CVSS5.8AI score0.00148EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/03/17 2:15 p.m.13 views

CVE-2021-22126

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point Meru AP and FortiAP-U as root using the default hard-coded...

6.7CVSS5.8AI score0.00156EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder