11638 matches found
Fortinet FortiAnalyzer Security Vulnerability
Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is primarily used to collect network log data and analyze, report, and archive security events, network traffic, and Web content from the logs through the Reporting...
Fortinet FortiClient security vulnerabilities
Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A hard-coded vulnerability exists in Fortinet FortiClien...
CVE-2023-33304: Use of Hard-coded Credentials
A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials...
CVE-2023-40719: Use of Hard-coded Credentials
A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...
Use Of Hard-coded Credentials
labelstudio is vulnerable to Hard-coded Credentials. An attacker is able to forge session tokens using the hardcoded secret key, which could allow them to impersonate any user on a vulnerable Label Studio instance. The attacker could exploit this vulnerability by sending a specially crafted HTTP...
CVE-2023-47800: Use of Hard-coded Credentials
Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allowing a threat actor to perform remote code execution, data exfiltration, or other nefarious actions such as tampering with data or destroying/disrupting MSSQL...
CVE-2023-41137: Use of Hard-coded Cryptographic Key
Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server...
CVE-2023-5777 Weintek EasyBuilder Pro Use of Hard-coded Credentials
Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server...
CVE-2023-5777 Weintek EasyBuilder Pro Use of Hard-coded Credentials
Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server...
CVE-2023-5777: Use of Hard-coded Credentials
Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server...
Weintek EasyBuilder Pro
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Weintek Equipment : EasyBuilder Pro Vulnerability : Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to obtain remote...
Dromara Lamp-Cloud Security Breach
Dromara Lamp-Cloud is based on Jdk11 + SpringCloud + SpringBoot development of microservices in the back-end rapid development platform , focusing on multi-tenant SaaS architecture solutions , can also be used as a general project non-SaaS architecture of the basic development framework , has bee...
CVE-2023-46129: Use of Hard-coded Cryptographic Key
NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The cryptographic key handling library, nkeys, recently gained support for encryption, not just for signing/authentication. This is used in nats-server...
Vinchin Backup and Recovery Security Vulnerabilities
Vinchin Backup and Recovery is an easy-to-use, safe and reliable virtual machine data protection software from China Yunqi Technology Vinchin. It is used for backup and recovery. A security vulnerability exists in Vinchin Backup and Recovery that stems from the presence of hard-coded credentials...
CVE-2023-45499: Use of Hard-coded Credentials
VinChin Backup & Recovery v5.0., v6.0., v6.7., and v7.0. was discovered to contain hardcoded credentials...
CVE-2018-17558: Use of Hard-coded Credentials
Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18, TVIP10051 LM.1.6.18, TVIP11050 MG.1.6.03.05, TVIP20550 LM.1.6.18, TVIP10050 LM.1.6.18, TVIP11550 MG.1.6.03, TVIP21050 MG.1.6.03, and TVIP51550 MG.1.6.03...
ABUS TVIP Security Vulnerability
ABUS TVIP is a series of video surveillance cameras from the German company ABUS. A security vulnerability exists in ABUS TVIP that stems from the presence of hard-coded credentials and operating system command injection vulnerabilities that allow remote attackers to execute code as root...
CVE-2023-42492
EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key...