10222 matches found
CVE-2024-23685
CVE-2024-23685 affects the Folio project’s mod-remote-storage, with hard-coded credentials in versions before 1.7.2 and 2.0.0–2.0.3. The root cause allows unauthorized readers to access mod-inventory-storage records (instances, holdings, items, contributor-types, identifier-types). The Red Hat an...
CVE-2024-23685 FOLIO mod-remote-storage Hard Coded Credentials
Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types...
mod-remote-storage Trust Management Issue Vulnerability
mod-remote-storage is a FOLIO open source backend module for remote storage. A security vulnerability exists in mod-remote-storage versions prior to 1.7.2 and versions 2.0.0 through 2.0.3, which stems from the use of hard-coded credentials. An attacker can exploit the vulnerability to read access...
mod-data-export-spring Trust Management Issues Vulnerability
mod-data-export-spring is a FOLIO open source API for data export Spring modules. A security vulnerability exists in mod-data-export-spring versions prior to 1.5.4, 2.0.0 through 2.0.2, which stems from the use of hard-coded credentials...
Use Of Hard-Coded Credentials
@evershop/evershop is vulnerable to the Use Of Hard-Coded Credentials. The vulnerability is due to the exposure of a weak HMAC secret. Attackers can use the predictable secret to create valid JSON Web Tokens JWT, which allows them access to sensitive information...
CVE-2023-28897 Hard-coded password for UDS services
The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III 3V3 - 2.0 TDI manufactured in 2022...
CVE-2023-28897 Hard-coded password for UDS services
The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulnerability discovered on Škoda Superb III 3V3 - 2.0 TDI manufactured in 2022...
Škoda Modular Infotainment Platform 3 Trust Management Issues Vulnerability
Škoda Modular Infotainment Platform 3 MIB3 is a modular infotainment platform from the Czech company Škoda. A security vulnerability exists in the Škoda Modular Infotainment Platform 3 MIB3 infotainment that stems from the use of hard-coded secret values...
Hongdian Router H8951-4G-ESP Trust Management Issues Vulnerability
The Hongdian Router H8951-4G-ESP is a wireless router from China Hongdian. A security vulnerability exists in versions prior to Hongdian Router H8951-4G-ESP 2310271149 that stems from the use of hard-coded passwords...
Rapid Software Rapid SCADA Trust Management Issue Vulnerability
Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. Rapid Software Rapid SCADA 5.8.4 and prior versions have a trust management issue vulnerability that stems from the use of hard-coded credentials, which allows an attacker to connect to a specific por...
Hongdian Router H8951-4G-ESP Security Vulnerability
The Hongdian Router H8951-4G-ESP is a wireless router from China Hongdian. A security vulnerability exists in versions prior to Hongdian Router H8951-4G-ESP 2310271149, which originates from the ability to unauthorizedly download a configuration backup and decrypt the contained passwords using a...
Hongdian Router H8951-4G-ESP Security Vulnerability
The Hongdian Router H8951-4G-ESP is a wireless router from China Hongdian. A security vulnerability exists in versions prior to Hongdian H8951-4G-ESP 2310271149, which stems from the authentication cookie being generated using an algorithm based on a username, hard-coded password, and uptime, and...
The vulnerability in virtual hard drives of Windows operating systems, which allows attackers to increase their privileges
The vulnerability of virtual hard drives VHDs in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
U.S. Dept Of Defense: Full Access to sonarQube and Docker
The vulnerability involved the exposure of sensitive credentials and IP addresses in a JavaScript file. The researcher gained access to the organization's Hub Docker account and Sonar projects, allowing them to identify and assess the issue. The vulnerability was caused by a JavaScript file withi...
Rapid Software LLC Rapid SCADA
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely, low attack complexity Vendor: Rapid Software LLC Equipment: Rapid SCADA Vulnerabilities: Path Traversal, Relative Path Traversal, Local Privilege Escalation through Incorrect Permission Assignment for Critical Resource,...
PT-2024-1449 · Unknown · Rapid Scada
Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to the use of hard-coded credentials in the SCADA system. This could allow a remote attacker to gain full control over the system by connecting to a specific port...
CVE-2023-48251
The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account...
CVE-2023-48251
The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account...
