Hard-coded credentials.

HPE IceWall Products, Remote Unauthorized Data Modification

• Hewlett Packard Enterprise HPE IceWall
• Hard-coded credentials

Ever Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard-coded JWT signing key.

• Hard-coded credentials

IBM Security Verify Access Appliance hard coded credentials

• IBM Security Verify Access
• Hard-coded credentials

IBM Security Verify Access Appliance hard coded credentials

• IBM Security Verify Access
• Hard-coded credentials

Insufficiently protected credentials in OpenText™ AccuRev

• OpenText™ AccuRev
• Hard-coded credentials

Insufficiently protected credentials in Mozilla Firefox

• Mozilla Firefox
• Hard-coded credentials

Hard-coded credentials in Sharp Corporation Multiple MFPs (multifunction printers) and others

• Sharp Corporation Multiple MFPs (multifunction printers)
• Toshiba Tec Corporation Multiple MFPs (multifunction printers)
• Hard-coded credentials

Hard-coded credentials in Sharp Corporation Multiple MFPs (multifunction printers) and others

• Sharp Corporation Multiple MFPs (multifunction printers)
• Toshiba Tec Corporation Multiple MFPs (multifunction printers)
• Hard-coded credentials

Insufficiently protected credentials in Axis Communications AB AXIS Camera Station Pro and others

• Axis Communications AB AXIS Camera Station Pro
• Axis Communications AB AXIS Camera Station
• Hard-coded credentials

Keycloak Build Process Exposes Sensitive Data

• Hard-coded credentials

<24.0.9 || >=25.0.0, <26.0.6 · fixed in 24.0.9, 26.0.6

Duplicate Advisory: Keycloak Build Process Exposes Sensitive Data

• Hard-coded credentials

<24.0.9 || >=25.0.0, <26.0.6 · fixed in 24.0.9, 26.0.6

E-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials

• E-Lins H685
• E-Lins H685f
• Hard-coded credentials

Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability

• Logsign Unified SecOps Platform
• Hard-coded credentials

Allegra Hard-coded Credentials Authentication Bypass Vulnerability

• Allegra
• Hard-coded credentials

Insufficiently protected credentials in AIPHONE CO., LTD. IXG-2C7 and others

• AIPHONE CO., LTD. IXG-2C7
• AIPHONE CO., LTD. IXG-2C7-L
• Hard-coded credentials

Hard-coded cryptographic key in AIPHONE CO., LTD. IX-MV and others

• AIPHONE CO., LTD. IX-MV
• AIPHONE CO., LTD. IX-MV7-HB
• Hard-coded credentials

Insufficiently protected credentials in AIPHONE CO., LTD. IX-MV and others

• AIPHONE CO., LTD. IX-MV
• AIPHONE CO., LTD. IX-MV7-HB
• Hard-coded credentials

Hard-coded cryptographic key in EPARK, Inc. Kura Sushi Official App Produced by EPARK

• EPARK, Inc. Kura Sushi Official App Produced by EPARK
• Hard-coded credentials

Hard-coded credentials in Versa Director

• Versa Director
• Hard-coded credentials

Tenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.

• Hard-coded credentials

Tenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.

• Hard-coded credentials

Cisco SD-WAN vManage Information Disclosure Vulnerability

• Cisco Catalyst SD-WAN Manager
• Hard-coded credentials

TRCore DVC - Use of Hard-coded Cryptographic Key

• TRCore DVC
• Hard-coded credentials

Azure Stack HCI Elevation of Privilege Vulnerability

• Microsoft Azure Stack HCI OS
• Hard-coded credentials

Clinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator

• Baxter Life2000 Ventilation System
• Hard-coded credentials

DataEase has a forged JWT token vulnerability

• dataease
• Hard-coded credentials

Hard-coded credentials used for temporary and cache data encryption

• Progress Software Corporation Telerik Report Server
• Hard-coded credentials

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption.

• Hard-coded credentials

Hard-coded cryptographic key in Siemens SINEC INS

• Siemens SINEC INS
• Hard-coded credentials

Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager)

• SAP_SE SAP NetWeaver Java (Software Update Manager)
• Hard-coded credentials

Intelligent Apps Freenow App Keystore SSL.java hard-coded password

• Intelligent Apps Freenow App
• Hard-coded credentials
• CWE-255

Hardcoded Service Password

• HASOMED Elefant
• Hard-coded credentials

mariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key

• mariazevedo88 travels-java-api
• Hard-coded credentials
• CWE-320

An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API, which is exposed by the luci-mod-rpc package

• Hard-coded credentials

Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server v…

• Hard-coded credentials

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request.

• Hard-coded credentials

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request.

• Hard-coded credentials

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request.

• Hard-coded credentials

LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.

• Hard-coded credentials

Altai Technologies Ltd Altai X500 Indoor 22 802.11ac Wave 2 AP web Management Weak password leakage in the background may lead to unauthorized access, data theft, and network attacks, seriously threa…

• Hard-coded credentials

Hard-coded credentials in LevelOne WBR-6012

• LevelOne WBR-6012
• Hard-coded credentials

Hard-coded credentials in LevelOne WBR-6012

• LevelOne WBR-6012
• Hard-coded credentials

D-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password, possibly allowing attackers to connect to the device via a bruteforce attack.

• Hard-coded credentials

D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the devi…

• Hard-coded credentials

IBM Flexible Service Processor hard coded credentials

• IBM Flexible Service Processor
• Hard-coded credentials

Exposure of vSphere's CPI and CSI credentials in Rancher

• Hard-coded credentials

>=2.7.0, <2.8.9 || >=2.9.0, <2.9.3 · fixed in 2.8.9, 2.9.3

OpenRefine leaks Google API credentials in releases

• Hard-coded credentials

<3.8.3 · fixed in 3.8.3

IBM Maximo Application Suite - Monitor Component information disclosure

• IBM Maximo Application Suite - Monitor Component
• Hard-coded credentials

Neye3C v4.5.2.0 was discovered to contain a hardcoded encryption key in the firmware update mechanism.

• Hard-coded credentials

Hard-coded password in Cisco Firepower Threat Defense Software

• Cisco Firepower Threat Defense Software
• Hard-coded credentials

Nexus Repository 3 - Static hard-coded encryption passphrase used by default

• Sonatype Nexus Repository
• Hard-coded credentials

IBM CICS Transaction Gateway for Multiplatforms information disclosure

• IBM CICS Transaction Gateway for Multiplatforms
• Hard-coded credentials

Kieback&Peter DDC4000 Series Use of Weak Credentials

• Kieback&Peter DDC4040e
• Kieback&Peter DDC4020e
• Hard-coded credentials

Kieback&Peter DDC4000 Series Path Traversal Insufficiently Protected Credentials

• Kieback&Peter DDC4040e
• Kieback&Peter DDC4020e
• Hard-coded credentials

Insufficiently protected credentials in Zyxel USG FLEX H series uOS firmware

• Zyxel USG FLEX H series uOS firmware
• Hard-coded credentials

WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability

• LiteSpeed Technologies LiteSpeed Cache
• Hard-coded credentials

MXsecurity Use of Hard-coded Credentials

• Moxa MXsecurity Series
• Hard-coded credentials

HMS Networks EWON FLEXY 202 Insufficiently Protected Credentials

• HMS Networks EWON FLEXY 202
• Hard-coded credentials

Insufficiently Protected Credentials in Elvaco M-Bus Metering Gateway CMe3100

• Elvaco M-Bus Metering Gateway CMe3100
• Hard-coded credentials

VM images built with Image Builder and Proxmox provider use default credentials in github.com/kubernetes-sigs/image-builder

• Hard-coded credentials

<0.1.38 · fixed in 0.1.38