Lucene search
+L

10456 matches found

Cvelist
Cvelist
•added 2022/04/29 3:04 p.m.•52 views

CVE-2022-29856

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages...

7.6AI score0.01573EPSS
SaveExploits2References2
CVE
CVE
•added 2022/04/29 3:04 p.m.•103 views

CVE-2022-29856

Automation360 22 contains a hardcoded cryptographic key that enables decryption of exported RPA packages, exposing confidentiality risk for users. The vulnerability stems from a fixed key used in packaging/export workflows, allowing an attacker to decrypt previously exported artifacts. Documented...

7.5CVSS7.4AI score0.01573EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/29 12:00 a.m.•8 views

PT-2022-19881

Name of the Vulnerable Software and Affected Versions Automation360 version 22 Description A hardcoded cryptographic key in the software allows an attacker to decrypt exported RPA packages. Recommendations For Automation360 version 22, consider removing or regenerating the hardcoded cryptographic...

7.5CVSS0.01573EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/29 12:00 a.m.•8 views

CVE-2022-29856: Use of Hard-coded Credentials

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages...

7.5CVSS7.3AI score0.01573EPSS
SaveExploits2References2
Prion
Prion
•added 2022/04/28 10:15 a.m.•33 views

Hardcoded credentials

In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible...

4.4CVSS7.6AI score0.00234EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2022/04/27 4:15 p.m.•26 views

CVE-2021-34601

In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI...

9.8CVSS5.8AI score0.01084EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/27 4:15 p.m.•32 views

CVE-2021-34601

In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI...

9.8CVSS0.01084EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/27 4:15 p.m.•31 views

Hardcoded credentials

In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI...

7.5CVSS9.6AI score0.01084EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2022/04/27 3:15 p.m.•43 views

CVE-2021-34601 Bender Charge Controller: Hardcoded Credentials in Charge Controller

In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI...

9.8CVSS9.9AI score0.01084EPSS
SaveExploits0References1
CVE
CVE
•added 2022/04/27 3:15 p.m.•99 views

CVE-2021-34601

CVE-2021-34601 affects Bender ebee Charge Controllers (notably CC612) with hardcoded SSH credentials in version 5.20.1 and earlier, enabling an attacker to gain administrative access to the web UI. Connected sources confirm affected products/versions; no exploitation status or patch details are p...

9.8CVSS9.8AI score0.01084EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2022/04/27 10:00 a.m.•15 views

CVE-2021-34601

In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI...

9.8CVSS7.2AI score0.01084EPSS
SaveExploits0References2Affected Software4
osv_ghsa
osv_ghsa
•added 2022/04/27 12:00 a.m.•25 views

GHSA-98J2-HFXP-8H8R Apache Doris hardcoded key and IV

Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure...

7.5CVSS7.3AI score0.0336EPSS
SaveExploits0References6
Packet Storm
Packet Storm
•added 2022/04/27 12:00 a.m.•189 views

Backdoor.Win32.Cafeini.b Hardcoded Credential

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/851f8945d1b5923990f4722d627156a0.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Cafeini.b Vulnerability: Weak Hardcoded Credentials Description: The malware listens ...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2022/04/27 12:00 a.m.•188 views

Backdoor.Win32.Agent.aegg Hardcoded Credential

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/58be35e792476d1c015df7853112d200.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.aegg Vulnerability: Weak Hardcoded Credentials Description: The malware listens...

7.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/27 12:00 a.m.•11 views

CVE-2021-34601: Use of Hard-coded Password

In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI...

9.8CVSS8.1AI score0.01084EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/04/27 12:00 a.m.•14 views

PT-2022-10365

Name of the Vulnerable Software and Affected Versions Bender/ebee Charge Controllers versions 5.20.1 and below Description The issue concerns hardcoded credentials in the charge controllers, specifically hardcoded ssh credentials. This could allow an attacker to gain administrative access to the...

9.8CVSS0.01084EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/04/26 4:15 p.m.•18 views

CVE-2022-23942

Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure...

7.5CVSS7.1AI score0.0336EPSS
SaveExploits0References4Affected Software1
osv_cve
osv_cve
•added 2022/04/26 4:15 p.m.•27 views

CVE-2022-23942

Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure...

7.5CVSS5.8AI score0.0336EPSS
SaveExploits0References3
osv_pysec
osv_pysec
•added 2022/04/26 4:15 p.m.•18 views

PYSEC-2022-43150

Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure...

7.5CVSS7.3AI score0.0336EPSS
SaveExploits0References7
PyPA
PyPA
•added 2022/04/26 4:15 p.m.•20 views

PYSEC-2022-43150

Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure...

7.5CVSS6.7AI score0.0336EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder