# Hard-coded credentials.

Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key](https://agentprime.io/advisories/CVE-2020-25193.md)
  `CVE-2020-25193` · CVE record: GE Reason RT43X Clocks · CVSS 5.3 Medium · Not analysed yet · Published 18 Mar 2022 · Tags: Hard-coded credentials
- [Rockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key](https://agentprime.io/advisories/CVE-2020-25180.md)
  `CVE-2020-25180` · CVE record: Rockwell Automation ISaGRAF Runtime · CVSS 5.3 Medium · Not analysed yet · Published 18 Mar 2022 · Tags: Hard-coded credentials
- [PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials](https://agentprime.io/advisories/CVE-2022-25246.md)
  `CVE-2022-25246` · CVE record: PTC Axeda agent and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Mar 2022 · Tags: Hard-coded credentials
- [Passwords stored in plain text by Jenkins dbCharts Plugin](https://agentprime.io/advisories/GHSA-x75r-g63m-82wj.md)
  `GHSA-x75r-g63m-82wj`, `CVE-2022-27216` · Maven `org.jenkins-ci.plugins:dbCharts`: affected `<=0.5.2`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 16 Mar 2022 · Tags: Hard-coded credentials
- [Client Secret stored in plain text by Jenkins GitLab Authentication Plugin](https://agentprime.io/advisories/GHSA-hx3r-qwxv-5jw9.md)
  `GHSA-hx3r-qwxv-5jw9`, `CVE-2022-27206` · Maven `org.jenkins-ci.plugins:gitlab-oauth`: affected `<1.14`, fixed in `1.14` · CVSS 3.3 Low · Not analysed yet · Published 16 Mar 2022 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin](https://agentprime.io/advisories/GHSA-9wvr-x83m-84v4.md)
  `GHSA-9wvr-x83m-84v4`, `CVE-2022-27217` · Maven `com.vmware.vcac:vmware-vrealize-codestream`: affected `<=1.2`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 16 Mar 2022 · Tags: Hard-coded credentials
- [Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin](https://agentprime.io/advisories/GHSA-8g9w-5jv6-7m4x.md)
  `GHSA-8g9w-5jv6-7m4x`, `CVE-2022-27218` · Maven `com.incapptic.plugins:incapptic-connect-uploader`: affected `<=1.15`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 16 Mar 2022 · Tags: Hard-coded credentials, CWE-256
- [Hard coded credentials in FreeTAKServer](https://agentprime.io/advisories/GHSA-f897-875p-23x7.md)
  `GHSA-f897-875p-23x7`, `CVE-2022-25510`, `PYSEC-2022-43135` · PyPI `freetakserver`: affected `<1.9.8.5`, fixed in `1.9.8.5` · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Yokogawa Electric Corporation CENTUM VP and others](https://agentprime.io/advisories/CVE-2022-23402.md)
  `CVE-2022-23402` · CVE record: Yokogawa Electric Corporation CENTUM VP and 1 more · No CVSS score · Not analysed yet · Published 11 Mar 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Yokogawa Electric Corporation CENTUM VP and others](https://agentprime.io/advisories/CVE-2022-21194.md)
  `CVE-2022-21194` · CVE record: Yokogawa Electric Corporation CENTUM VP and 1 more · No CVSS score · Not analysed yet · Published 11 Mar 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in postgresql](https://agentprime.io/advisories/CVE-2021-23222.md)
  `CVE-2021-23222` · CVE record: postgresql · No CVSS score · Not analysed yet · Published 2 Mar 2022 · Tags: Hard-coded credentials
- [Use of Hard-coded Cryptographic Key in Netmaker](https://agentprime.io/advisories/GHSA-86f3-hf24-76q4.md)
  `GHSA-86f3-hf24-76q4`, `CVE-2022-23650`, `GO-2022-0328` · Go `github.com/gravitl/netmaker`: affected `<0.8.5 || >=0.9.0, <0.9.4`, fixed in `0.8.5`, `0.9.4` · CVSS 7.2 High · Not analysed yet · Published 22 Feb 2022 · Tags: Hard-coded credentials
- [Jenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-qv6q-x9vr-w7j3.md)
  `GHSA-qv6q-x9vr-w7j3`, `CVE-2022-25180` · Maven `org.jenkins-ci.plugins.workflow:workflow-cps`: affected `<2656.vf7a_e7b_75a_457`, fixed in `2656.vf7a_e7b_75a_457` · CVSS 4.3 Medium · Not analysed yet · Published 16 Feb 2022 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [Password parameter default values exposed by Jenkins Pipeline: Build Step Plugin](https://agentprime.io/advisories/GHSA-g84f-cmc8-682c.md)
  `GHSA-g84f-cmc8-682c`, `CVE-2022-25184` · Maven `org.jenkins-ci.plugins:pipeline-build-step`: affected `<2.15.1`, fixed in `2.15.1` · CVSS 4.3 Medium · Not analysed yet · Published 16 Feb 2022 · Tags: Hard-coded credentials
- [Jenkins Support Core Plugin stores sensitive data in plain text](https://agentprime.io/advisories/GHSA-5m8f-v3gw-h94w.md)
  `GHSA-5m8f-v3gw-h94w`, `CVE-2022-25187` · Maven `org.jenkins-ci.plugins:support-core`: affected `<2.79.1`, fixed in `2.79.1` · CVSS 6.5 Medium · Not analysed yet · Published 16 Feb 2022 · Tags: Information disclosure, Hard-coded credentials, CWE-212
- [containers/image library Insufficiently Protects Credentials](https://agentprime.io/advisories/GHSA-85p9-j7c9-v4gr.md)
  `GHSA-85p9-j7c9-v4gr`, `CVE-2019-10214`, `GO-2021-0081` · Go `github.com/containers/image`: affected `<3.0.0`, fixed in `3.0.0` · CVSS 6.4 Medium · Not analysed yet · Published 15 Feb 2022 · Tags: Hard-coded credentials
- [BD Viper LT System - Hardcoded Credentials](https://agentprime.io/advisories/CVE-2022-22765.md)
  `CVE-2022-22765` · CVE record: Becton Dickinson (BD) BD Viper LT System · CVSS 8.0 High · Not analysed yet · Published 12 Feb 2022 · Tags: Hard-coded credentials
- [Incorrect handling of credential expiry by /nats-io/nats-server](https://agentprime.io/advisories/GHSA-4w5x-x539-ppf5.md)
  `GHSA-4w5x-x539-ppf5`, `CVE-2020-26892`, `GHSA-2c64-vj8g-vwrq`, `GO-2022-0380` · Go `github.com/nats-io/jwt`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Feb 2022 · Tags: Hard-coded credentials
- [containerd v1.2.x can be coerced into leaking credentials during image pull](https://agentprime.io/advisories/GHSA-742w-89gc-8m9c.md)
  `GHSA-742w-89gc-8m9c`, `CVE-2020-15157`, `GO-2022-0803` · Go `github.com/containerd/containerd`: affected `<1.2.14`, fixed in `1.2.14` · CVSS 6.1 Medium · Not analysed yet · Published 11 Feb 2022 · Tags: Hard-coded credentials
- [BD Pyxis Products - Hardcoded Credentials](https://agentprime.io/advisories/CVE-2022-22766.md)
  `CVE-2022-22766` · CVE record: Becton Dickinson (BD) BD Pyxis Anesthesia Station ES and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Feb 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Conext� ComBox (All Versions)](https://agentprime.io/advisories/CVE-2021-22798.md)
  `CVE-2021-22798` · CVE record: Conext� ComBox (All Versions) · No CVSS score · Not analysed yet · Published 11 Feb 2022 · Tags: Hard-coded credentials
- [Insufficiently Protected Credentials in Reactor Netty](https://agentprime.io/advisories/GHSA-gpch-h32j-gx6x.md)
  `GHSA-gpch-h32j-gx6x`, `CVE-2020-5404` · Maven `io.projectreactor.netty:reactor-netty-http`: affected `>=0.9.0, <0.9.5 || >=0.8.0, <0.8.16`, fixed in `0.9.5`, `0.8.16` · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2022 · Tags: Hard-coded credentials
- [GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux](https://agentprime.io/advisories/CVE-2022-0019.md)
  `CVE-2022-0019` · CVE record: Palo Alto Networks GlobalProtect App · CVSS 4.7 Medium · Not analysed yet · Published 10 Feb 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Easergy P40 Series model numbers with Ethernet option bit as Q, R…](https://agentprime.io/advisories/CVE-2022-22813.md)
  `CVE-2022-22813` · CVE record: Easergy P40 Series model numbers with Ethernet option bit as Q, R, S (All PX4X firmware Versions) · No CVSS score · Not analysed yet · Published 9 Feb 2022 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Intel(R) AMT SDK before version 16.0.3…](https://agentprime.io/advisories/CVE-2021-33107.md)
  `CVE-2021-33107` · CVE record: Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx · CVSS 4.6 Medium · Not analysed yet · Published 9 Feb 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Siemens SICAM TOOLBOX II](https://agentprime.io/advisories/CVE-2021-45106.md)
  `CVE-2021-45106` · CVE record: Siemens SICAM TOOLBOX II · No CVSS score · Not analysed yet · Published 9 Feb 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Schneider Electric Easergy P5](https://agentprime.io/advisories/CVE-2022-22722.md)
  `CVE-2022-22722` · CVE record: Schneider Electric Easergy P5 · No CVSS score · Not analysed yet · Published 4 Feb 2022 · Tags: Hard-coded credentials
- [Advantech ADAM-3600](https://agentprime.io/advisories/CVE-2022-22987.md)
  `CVE-2022-22987` · CVE record: Advantech ADAM-3600 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2022 · Tags: Hard-coded credentials
- [Insufficiently Protected Credentials in Apache Superset](https://agentprime.io/advisories/GHSA-hhm3-48h2-597v.md)
  `GHSA-hhm3-48h2-597v`, `BIT-superset-2021-44451`, `CVE-2021-44451`, `PYSEC-2022-36` · PyPI `apache-superset`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 6.5 Medium · Not analysed yet · Published 2 Feb 2022 · Tags: Hard-coded credentials
- [Password exposure in ShenYu](https://agentprime.io/advisories/GHSA-7wq4-89xx-g62j.md)
  `GHSA-7wq4-89xx-g62j`, `CVE-2022-23223` · Maven `org.apache.shenyu:shenyu-common`: affected `>=2.4.0, <2.4.2`, fixed in `2.4.2` · CVSS 7.5 High · Not analysed yet · Published 28 Jan 2022 · Tags: Hard-coded credentials
- [An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102.](https://agentprime.io/advisories/CVE-2022-21199.md)
  `CVE-2022-21199` · CVE record · CVSS 7.5 High · Not analysed yet · Published 28 Jan 2022 · Tags: Hard-coded credentials
- [Fresenius Kabi Agilia Connect Infusion System hard coded credentials](https://agentprime.io/advisories/CVE-2021-44464.md)
  `CVE-2021-44464` · CVE record: Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) · CVSS 6.3 Medium · Not analysed yet · Published 21 Jan 2022 · Tags: Hard-coded credentials
- [Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials](https://agentprime.io/advisories/CVE-2021-23196.md)
  `CVE-2021-23196` · CVE record: Fresenius Kabi Agilia Link+ · CVSS 7.3 High · Not analysed yet · Published 21 Jan 2022 · Tags: Hard-coded credentials
- [MongoDB Extension for VS Code may unexpectedly store credentials locally in clear text](https://agentprime.io/advisories/CVE-2021-32039.md)
  `CVE-2021-32039` · CVE record: MongoDB Inc. MongoDB for VS Code · CVSS 5.5 Medium · Not analysed yet · Published 20 Jan 2022 · Tags: Hard-coded credentials
- [Use of Hard-coded Cryptographic Key](https://agentprime.io/advisories/CVE-2021-23842.md)
  `CVE-2021-23842` · CVE record: Bosch AMS and 3 more · CVSS 5.7 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: Hard-coded credentials
- [Le-yan Co., Ltd. dental management system - Hard-coded Credentials](https://agentprime.io/advisories/CVE-2022-22056.md)
  `CVE-2022-22056` · CVE record: Le-yan Co., Ltd. Dental Management System · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jan 2022 · Tags: Hard-coded credentials
- [Access key stored in plain text by Jenkins Metrics Plugin](https://agentprime.io/advisories/GHSA-gg9m-x3cg-69vh.md)
  `GHSA-gg9m-x3cg-69vh`, `CVE-2022-20621` · Maven `org.jenkins-ci.plugins:metrics`: affected `>=4.0.2.8, <4.0.2.8.1 || <4.0.2.7.1`, fixed in `4.0.2.8.1`, `4.0.2.7.1` · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2022 · Tags: Hard-coded credentials
- [Improper credentials masking in Jenkins HashiCorp Vault Plugin](https://agentprime.io/advisories/GHSA-h6x7-jq46-fp33.md)
  `GHSA-h6x7-jq46-fp33`, `CVE-2022-23109` · Maven `com.datapipe.jenkins.plugins:hashicorp-vault-plugin`: affected `<3.8.0`, fixed in `3.8.0` · CVSS 6.5 Medium · Not analysed yet · Published 13 Jan 2022 · Tags: Hard-coded credentials
- [Password stored in plain text by Jenkins Publish Over SSH Plugin](https://agentprime.io/advisories/GHSA-r3rr-wph6-9638.md)
  `GHSA-r3rr-wph6-9638`, `CVE-2022-23114` · Maven `org.jenkins-ci.plugins:publish-over-ssh`: affected `<1.23`, fixed in `1.23` · CVSS 3.3 Low · Not analysed yet · Published 13 Jan 2022 · Tags: Hard-coded credentials
- [Hard-coded credentials in Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C and others](https://agentprime.io/advisories/CVE-2021-45033.md)
  `CVE-2021-45033` · CVE record: Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C and 3 more · No CVSS score · Not analysed yet · Published 11 Jan 2022 · Tags: Hard-coded credentials
- [Bot token exposed in main.py](https://agentprime.io/advisories/CVE-2022-21669.md)
  `CVE-2022-21669` · CVE record: PuddingBot pudding-bot · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jan 2022 · Tags: Hard-coded credentials
- [In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin.](https://agentprime.io/advisories/GHSA-mgpf-hhgf-cxg4.md)
  `GHSA-mgpf-hhgf-cxg4`, `CVE-2021-45457` · Maven `org.apache.kylin:kylin`: affected `<3.1.3 || >=4.0.0, <4.0.1`, fixed in `3.1.3`, `4.0.1` · CVSS 7.5 High · Not analysed yet · Published 8 Jan 2022 · Tags: Hard-coded credentials
- [Use of Hard-coded Credentials in Apache Kylin](https://agentprime.io/advisories/GHSA-9fj5-jg6f-qg5r.md)
  `GHSA-9fj5-jg6f-qg5r`, `CVE-2021-45458` · Maven `org.apache.kylin:kylin`: affected `<3.1.3 || >=4.0.0, <4.0.1`, fixed in `3.1.3`, `4.0.1` · CVSS 7.5 High · Not analysed yet · Published 8 Jan 2022 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [Weak Password Requirements in Daybyday CRM](https://agentprime.io/advisories/GHSA-96v6-hrwg-p378.md)
  `GHSA-96v6-hrwg-p378`, `CVE-2022-22110`, `PKSA-t3c4-shkv-kdr7` · Packagist `bottelet/flarepoint`: affected `>=1.1, <2.2.1`, fixed in `2.2.1` · CVSS 7.5 High · Not analysed yet · Published 8 Jan 2022 · Tags: Hard-coded credentials
- [Philips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key](https://agentprime.io/advisories/CVE-2021-43552.md)
  `CVE-2021-43552` · CVE record: Philips Patient Information Center iX (PIC iX) · CVSS 6.1 Medium · Not analysed yet · Published 27 Dec 2021 · Tags: Hard-coded credentials
- [Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials](https://agentprime.io/advisories/CVE-2021-32993.md)
  `CVE-2021-32993` · CVE record: Philips IntelliBridge EC 40 Hub and 1 more · CVSS 8.1 High · Not analysed yet · Published 27 Dec 2021 · Tags: Hard-coded credentials
- [Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries](https://agentprime.io/advisories/CVE-2021-35232.md)
  `CVE-2021-35232` · CVE record: SolarWinds Web Help Desk · CVSS 6.8 Medium · Not analysed yet · Published 27 Dec 2021 · Tags: Hard-coded credentials
- [Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.](https://agentprime.io/advisories/CVE-2021-44207.md)
  `CVE-2021-44207` · CVE record · CVSS 8.1 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.17 · Not analysed yet · Published 21 Dec 2021 · Tags: Hard-coded credentials
- [Hard-coded cryptographic key in Dell PowerPath Management Appliance](https://agentprime.io/advisories/CVE-2021-43587.md)
  `CVE-2021-43587` · CVE record: Dell PowerPath Management Appliance · CVSS 8.2 High · Not analysed yet · Published 21 Dec 2021 · Tags: Hard-coded credentials
- [Opencast publishes global system account credentials](https://agentprime.io/advisories/GHSA-hcxx-mp6g-6gr9.md)
  `GHSA-hcxx-mp6g-6gr9`, `CVE-2018-16153` · Maven `org.opencastproject:opencast-common`: affected `<10.6`, fixed in `10.6` · CVSS 7.5 High · Not analysed yet · Published 14 Dec 2021 · Tags: Information disclosure, Hard-coded credentials
- [Insufficiently protected credentials in Siemens ModelSim Simulation and others](https://agentprime.io/advisories/CVE-2021-42023.md)
  `CVE-2021-42023` · CVE record: Siemens ModelSim Simulation and 1 more · No CVSS score · Not analysed yet · Published 14 Dec 2021 · Tags: Hard-coded credentials
- [Weak default credential associated with TCP port 26](https://agentprime.io/advisories/CVE-2021-40333.md)
  `CVE-2021-40333` · CVE record: Hitachi Energy FOX61x and 1 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Dec 2021 · Tags: Hard-coded credentials
- [HejHome IP Camera use of hard-coded credentials vulnerability](https://agentprime.io/advisories/CVE-2021-26611.md)
  `CVE-2021-26611` · CVE record: Goqual GKW-IC052 · CVSS 8.1 High · Not analysed yet · Published 26 Nov 2021 · Tags: Hard-coded credentials
- [Hard-coded password in Dell CloudLink](https://agentprime.io/advisories/CVE-2021-36312.md)
  `CVE-2021-36312` · CVE record: Dell CloudLink · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Nov 2021 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in Motorola Binatone Hubble Cameras](https://agentprime.io/advisories/CVE-2021-3789.md)
  `CVE-2021-3789` · CVE record: Motorola Binatone Hubble Cameras · CVSS 4.2 Medium · Not analysed yet · Published 12 Nov 2021 · Tags: Hard-coded credentials
- [Insufficiently protected credentials in SAP SE SAP GUI for Windows](https://agentprime.io/advisories/CVE-2021-40503.md)
  `CVE-2021-40503` · CVE record: SAP SE SAP GUI for Windows · No CVSS score · Not analysed yet · Published 10 Nov 2021 · Tags: Hard-coded credentials
- [Cisco Policy Suite Static SSH Keys Vulnerability](https://agentprime.io/advisories/CVE-2021-40119.md)
  `CVE-2021-40119` · CVE record: Cisco Cisco Policy Suite (CPS) Software · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2021 · Tags: Hard-coded credentials
- [AUVESY Versiondog](https://agentprime.io/advisories/CVE-2021-38461.md)
  `CVE-2021-38461` · CVE record: AUVESY Versiondog · CVSS 8.2 High · Not analysed yet · Published 22 Oct 2021 · Tags: Hard-coded credentials
- [InHand Networks IR615 Router](https://agentprime.io/advisories/CVE-2021-38462.md)
  `CVE-2021-38462` · CVE record: InHand Networks IR615 Router · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2021 · Tags: Hard-coded credentials
- [Moxa MXview Network Management Software](https://agentprime.io/advisories/CVE-2021-38456.md)
  `CVE-2021-38456` · CVE record: Moxa MXview Network Management Software · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2021 · Tags: Hard-coded credentials

Newest: <https://agentprime.io/advisories/tag/hard-coded-credentials.md>
Older: <https://agentprime.io/advisories/tag/hard-coded-credentials.md?cursor=WyIyMDIxLTEwLTEyVDEzOjM3OjQ2LjY4ODAwMFoiLCJDVkUtMjAyMS0zODQ1NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=hard-coded-credentials&cursor=WyIyMDIyLTAzLTIzVDE0OjIwOjEyLjAwMDAwMFoiLCJDVkUtMjAyMi0wODU5Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/hard-coded-credentials/?cursor=WyIyMDIyLTAzLTIzVDE0OjIwOjEyLjAwMDAwMFoiLCJDVkUtMjAyMi0wODU5Il0>. Everything for agents: <https://agentprime.io/llms.txt>.