Lucene search
+L

11487 matches found

CNVD
CNVD
•added 2024/12/20 12:00 a.m.•36 views

Dell RecoverPoint for Virtual Machines Trust Management Issue Vulnerability

Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. For virtualized applications in VMware environments. A trust management issue vulnerability exists in Dell RecoverPoint for Virtual Machines version 6.0 SP1 and version 6.0 SP1...

9.8CVSS7AI score0.00415EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/18 12:15 p.m.•23 views

CVE-2024-4996

Use of a hard-coded password for a database administrator account created during Wapro ERP installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Wapro ERP installations. This issue affects Wapro ERP Desktop versions before 8.90....

9.8CVSS0.0057EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/18 12:00 a.m.•22 views

PT-2024-33801

Name of the Vulnerable Software and Affected Versions: Wapro ERP Desktop versions prior to 8.90.0 Description: The issue involves the use of a hard-coded password for a database administrator account created during Wapro ERP installation. This allows an attacker to retrieve embedded sensitive dat...

9.8CVSS9.2AI score0.00924EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/18 12:00 a.m.•4 views

CVE-2024-4996: Use of Hard-coded Password

Use of a hard-coded password for a database administrator account created during Wapro ERP installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Wapro ERP installations. This issue affects Wapro ERP Desktop versions before 8.90....

9.8CVSS5.8AI score0.0057EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/18 12:00 a.m.•17 views

Asseco Business Solutions Wapro ERP security vulnerability

Asseco Business Solutions Wapro ERP is an enterprise-oriented ERP software from Asseco Business Solutions, Poland. A security vulnerability exists in Asseco Business Solutions Wapro ERP versions prior to 8.90.0, which stems from a hard-coded password for the database administrator account created...

9.8CVSS8.9AI score0.00924EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•5 views

CVE-2024-55557: Use of Hard-coded Credentials

ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials...

9.8CVSS5.7AI score0.01356EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/16 12:00 a.m.•14 views

Trellix Data Loss Prevention security vulnerabilities

Trellix Data Loss Prevention Trellix DLP is a data loss prevention solution from American FireEye Trellix. It provides a comprehensive scan of inbound and outbound network traffic for all ports, protocols, etc. A security vulnerability exists in Trellix Data Loss Prevention Trellix DLP version...

5.3CVSS6.7AI score0.00373EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/16 12:00 a.m.•23 views

Weasis security vulnerabilities

Weasis is an open source DICOM medical image viewer, mainly used to visualize images obtained from medical imaging devices. A key disclosure vulnerability exists in Weasis version 4.5.1, which stems from having a hard-coded key for symmetric encryption of proxy credentials in...

9.8CVSS6.5AI score0.01356EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/12/13 2:15 p.m.•19 views

CVE-2024-48007

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

9.8CVSS5.8AI score0.00415EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/13 2:15 p.m.•31 views

CVE-2024-48007

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

9.8CVSS0.00415EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:00 p.m.•39 views

CVE-2024-48007

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

5.3CVSS0.00415EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:00 p.m.•81 views

CVE-2024-48007

CVE-2024-48007 affects Dell RecoverPoint for Virtual Machines, version 6.0.x. The vulnerability stems from hard-coded credentials in the software, enabling a remote, unauthenticated attacker to access secrets and, consequently, unauthorized data. Documents consistently describe the impact as enab...

9.8CVSS5.5AI score0.00415EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:00 p.m.•16 views

CVE-2024-48007

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

5.3CVSS7.3AI score0.00415EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•8 views

CVE-2024-48007: Use of Hard-coded Credentials

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

9.8CVSS6AI score0.00415EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•23 views

PT-2024-9593 · Dell · Dell Recoverpoint For Virtual Machines

Name of the Vulnerable Software and Affected Versions: Dell RecoverPoint for Virtual Machines version 6.0.x Description: The issue is related to the use of hard-coded credentials in the software. A remote unauthenticated attacker could exploit this by gaining access to the source code, easily...

9.8CVSS7.2AI score0.00415EPSS
SaveExploits0References6
NVD
NVD
•added 2024/12/12 2:15 p.m.•44 views

CVE-2024-28146

The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device...

8.4CVSS0.00266EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/12 1:49 p.m.•94 views

CVE-2024-28146

The Image Access Scan2Net scanning software (versions 7.40 and earlier , 7.42 and earlier , and 7.42B and earlier ) is vulnerable to the use of hard-coded credentials . These credentials are used to encrypt configuration files during backups, decrypt new firmware during updates, and provide direc...

8.4CVSS6.6AI score0.00266EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/12 12:00 a.m.•22 views

PT-2024-22296 · Image Access Gmbh · Scan2Net

Name of the Vulnerable Software and Affected Versions: Application affected versions not specified Description: The issue concerns the application's use of several hard-coded credentials. These credentials are used for encrypting config files during backup and decrypting new firmware during...

8.4CVSS7AI score0.00266EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•7 views

CVE-2024-28146: Use of Hard-coded Credentials

The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device...

8.4CVSS5.9AI score0.00266EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•17 views

Image Access Scan2Net security vulnerability

Image Access Scan2Net is a scanning software from Image Access, Germany. A security vulnerability exists in Image Access Scan2Net versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier, which stems from the application's use of multiple hard-coded credentials to encrypt configuration...

8.4CVSS6.8AI score0.00266EPSS
SaveExploits0References2
Rows per page
Query Builder