8335 matches found
CVE-2025-45813
ENENSYS IPGuard v2 2.10.0 was discovered to contain hardcoded credentials...
PT-2025-27662 · Enensys · Enensys Ipguard
Name of the Vulnerable Software and Affected Versions: ENENSYS IPGuard v2 version 2.10.0 Description: The issue concerns hardcoded credentials in the software. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world inciden...
CVE-2025-45813
CVE-2025-45813 concerns ENENSYS IPGuard v2.10.0 with hardcoded credentials. Affected component is the IPGuard device/software; root cause is hardcoded credential storage leading to potential unauthenticated access. Impact is high confidentiality, integrity, and availability risk per the CVSS vect...
CVE-2025-47823
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have a hardcoded password for a system...
CVE-2025-47821
Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system...
CVE-2025-47821
Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system...
CVE-2025-47823
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have a hardcoded password for a system...
CVE-2025-47823
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have a hardcoded password for a system...
CVE-2025-47821
Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system...
SUSE CVE-2024-6174
When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...
CVE-2025-47823
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have a hardcoded password for a system...
📄 Mouselink 5.0.1 Unauthenticated Remote Code Execution
Mouselink version 5.0.1 allows unauthenticated remote code execution due to improper JWT validation, enabling attackers to forge JWT tokens with a known hardcoded secret. Using the forged token, attackers can bypass authentication, connect to the WebSocket interface, and simulate keyboard input t...
PT-2025-27039 · Flock Safety · Flock Safety Gunshot Detection
Name of the Vulnerable Software and Affected Versions: Flock Safety Gunshot Detection devices versions prior to 1.3 Description: The issue concerns a hardcoded password for a system in Flock Safety Gunshot Detection devices. This hardcoded password could potentially be exploited. Recommendations:...
CVE-2025-47823
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have a hardcoded password for a system...
PT-2025-27041 · Flock Safety · Flock Safety Lpr
Name of the Vulnerable Software and Affected Versions: Flock Safety LPR devices with firmware through 2.2 Description: The issue concerns a hardcoded password for a system in Flock Safety LPR devices. Recommendations: For Flock Safety LPR devices with firmware through 2.2, consider changing the...
CVE-2025-47821
Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system...
CVE-2025-47821
Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system...
CVE-2025-47823
CVE-2025-47823 affects Flock Safety LPR devices with firmware up to 2.2, where a hardcoded password for a system exists. The issue enables unauthorized access via physical attack vector (attackVector: PHYSICAL) with low complexity, no privileges required, and impacts confidentiality (HIGH) per th...
CVE-2025-47821
CVE-2025-47821 affects Flock Safety Gunshot Detection devices prior to version 1.3, due to a hardcoded system password. Root cause: hardcoded credential that can lead to confidentiality impact if exploited. CVSS vectors indicate physical access required with high confidentiality impact; exploitab...
DEBIAN-CVE-2024-6174
When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...