CWE-547.

Keylime has a hardcoded attestation challenge nonce that allows replay attacks

• Authentication bypass
• CWE-329

>=7.14.0, <7.14.2 · fixed in 7.14.2

Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

• Trane Tracer SC
• Trane Tracer Concierge
• CWE-547

Use of Hard-coded, Security-relevant Constants in MICROSENS NMP Web+

• Microsens NMP Web+
• CWE-547

NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in a hard-coded path.

• NVIDIA App
• CWE-547

Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

• Hard-coded credentials
• CWE-453

<1.6.1 · fixed in 1.6.1

Use of Hard-Coded, Security-Relevant Constants

• Optigo Networks Visual BACnet Capture Tool
• Optigo Networks Optigo Visual Networks Capture Tool
• CWE-547

Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool

• Optigo Networks Visual BACnet Capture Tool
• Optigo Networks Optigo Visual Networks Capture Tool
• CWE-547

Hardcoding sensitive information

• Hanwha Vision Co., Ltd. XRN-420S
• CWE-547

A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2).

• Siemens Mendix Encryption
• CWE-547

Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory

• git
• CWE-547

Use of hard-coded, security-relevant constants in deepset-ai/haystack

• CWE-547

<=1.15.0 · no fixed version yet

keycloak vulnerable to unauthorized login via mail server setup

• Hard-coded credentials
• CWE-547

<8.0.0 · fixed in 8.0.0

Bypassing Sanitization using DOM clobbering in html-janitor

• CWE-547
• CWE-642

* · no fixed version yet