CVE-2020-4190

IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174851...

CVE-2020-4177

IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174732...

CVE-2020-4177

Summary of CVE-2020-4177 (IBM Security Guardium) : The vulnerability stems from hard-coded credentials used for internal data encryption and for inbound/outbound communications. This affects IBM Security Guardium versions including 10.5, 10.6, 11.0, and 11.1. The associated IBM bulletin notes rem...

Rockwellautomation Micrologix Use of Hard-coded Credentials

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file...

CVE-2020-8434

Jenzabar JICS aka Internet Campus Solution before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookies that are a deterministic function of the username. There is a hard-coded password to supply a PBKDF feeding into AES to encrypt a username and base64 encode ...

CVE-2020-8434

Jenzabar JICS aka Internet Campus Solution before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookies that are a deterministic function of the username. There is a hard-coded password to supply a PBKDF feeding into AES to encrypt a username and base64 encode ...

CVE-2020-8434

Jenzabar JICS aka Internet Campus Solution before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookies that are a deterministic function of the username. There is a hard-coded password to supply a PBKDF feeding into AES to encrypt a username and base64 encode ...

CVE-2020-8434

Jenzabar JICS aka Internet Campus Solution before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookies that are a deterministic function of the username. There is a hard-coded password to supply a PBKDF feeding into AES to encrypt a username and base64 encode ...

Remote Command Execution Vulnerability in Hard Disk Recorder of Zhejiang YUV Technology Co.

Founded in 2011, Zhejiang Yusi Technology Co., Ltd Yusi is a global solution provider for public safety and intelligent transportation. Zhejiang YUVE Technology Co., Ltd. hard disk recorders exist remote command execution vulnerability, an attacker can use the vulnerability to execute system...

Calibre-Web Authorization Issues Vulnerability

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. An authorization issue vulnerability exists in Calibre-Web version 0.6.6, which stems from the program's use of a hard-coded secret key that can be exploited by an attacker to bypass...

Avira Operations Avira Software Updater Privilege Vulnerability

Avira Operations Avira Software Updater is a software upgrade management tool for Avira products from Avira Operations. A power-up vulnerability exists in Avira Operations Avira Software Updater prior to version 2.0.6.27476, which stems from the program failing to properly handle hard links to...

PT-2020-2511 · Cisco · Cisco Firepower User Agent +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower User Agent Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software that could allow ...

PT-2020-2510 · Cisco · Cisco Firepower Management Center +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower User Agent Software affected versions not specified Description: The issue concerns multiple vulnerabilities in Cisco Firepower Management Center F...

CVE-2020-12463

An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files...

Privilege escalation

An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files...

Accellion File Transfer Appliance Trust Management Issues Vulnerability

Accellion File Transfer Appliance is a file transfer appliance from Accellion, USA. The product supports sharing and synchronizing files online using AES 128/256, among other things. A trust management issue vulnerability exists in the Accellion File Transfer Appliance version FTA80540. The...

CVE-2019-5622

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

CVE-2019-5622

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

Hardcoded credentials

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

CVE-2019-5622

CVE-2019-5622 affects Accellion File Transfer Appliance (FTA_8_0_540) and is caused by CWE-798: Use of Hard-coded Credentials. Multiple connected records corroborate a hard-coded/default credential issue in the FTA, implying high impact with potential unauthorized access. The CVSS data (v2/v3) ci...