Hard-coded credentials.

IBM Security Verify Governance information disclosure

• IBM Security Verify Governance
• Hard-coded credentials

Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables

• Information disclosure
• Hard-coded credentials

>=1.0.0, <1.5.6 || >=2.0.0-alpha.0, <2.0.0-alpha.16 · fixed in 1.5.6, 2.0.0-alpha.16

Hard-coded password in SonicWall SonicOS

• SonicWall SonicOS
• Hard-coded credentials

IBM Security Verify Governance information disclosure

• IBM Security Verify Governance
• Hard-coded credentials

BIG-IP Next SPK SSH vulnerability

• F5 BIG-IP Next SPK
• Hard-coded credentials

Hard-coded credentials in Siemens CP-8031 MASTER MODULE and others

• Siemens CP-8031 MASTER MODULE
• Siemens CP-8050 MASTER MODULE
• Hard-coded credentials

QVPN Device Client

• QNAP Systems Inc. QVPN Windows
• Hard-coded credentials

Qognify NiceVision Use of Hard-coded Credentials

• Qognify NiceVision
• Hard-coded credentials

Hard-coded credentials in Cisco Emergency Responder

• Cisco Emergency Responder
• Hard-coded credentials

Admin password reset in NetMan 204

• Riello UPS Netman-204
• Hard-coded credentials

Microweber uses hard coded credentials

• Hard-coded credentials

<=1.3.4 · no fixed version yet

Hard-coded credentials in Cisco SD-WAN vManage

• Cisco SD-WAN vManage
• Hard-coded credentials

Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password

• Viessmann Vitogate 300
• Hard-coded credentials

Insufficiently protected credentials in Acronis Cyber Protect 15

• Acronis Cyber Protect 15
• Hard-coded credentials

Weak password of selenium VNC in MeterSphere

• metersphere
• Hard-coded credentials

OpenStack Barbican credential leak flaw

• Information disclosure
• Hard-coded credentials

<=16.0.0 · no fixed version yet

Duplicate Advisory: EVE Has Partially Predetermined Vault Key

• Hard-coded credentials

<0.0.0-20220310190112-c0c966dc31e2 · fixed in 0.0.0-20220310190112-c0c966dc31e2

Duplicate Advisory: EVE: SSH as Root Unlockable Without Triggering Measured Boot

• Hard-coded credentials

<0.0.0-20220708121648-5fef4d92e758 · fixed in 0.0.0-20220708121648-5fef4d92e758

Duplicate Advisory: EVE's Debug Functions Unlockable Without Triggering Measured Boot

• Hard-coded credentials

<0.0.0-20220708121648-5fef4d92e758 · fixed in 0.0.0-20220708121648-5fef4d92e758

Duplicate Advisory: EVE Doesn't Protect Config Partition with Measured Boot

• Hard-coded credentials

<0.0.0-20230519072751-977f42b07fa9 · fixed in 0.0.0-20230519072751-977f42b07fa9

Authentication Bypass in D-Link D-View 8

• D-Link D-View 8
• Hard-coded credentials

Duplicate Advisory: EVE Doesn't Measure Config Partition From 2 Fronts

• Weak cryptography or TLS
• Hard-coded credentials

<0.0.0-20230126065759-d9383a7ee4e1 · fixed in 0.0.0-20230126065759-d9383a7ee4e1

Insufficiently protected credentials in NVIDIA DGX H100 BMC

• NVIDIA DGX H100 BMC
• Hard-coded credentials

Insufficiently protected credentials in NVIDIA DGX H100 BMC

• NVIDIA DGX H100 BMC
• Hard-coded credentials

Juplink RX4-1500 Hard-coded Credential Vulnerability

• Juplink RX4-1500
• Hard-coded credentials

Hard-coded credentials in Fortinet FortiTester

• Fortinet FortiTester
• Hard-coded credentials

Use of Hard-coded Credentials in multiple /irmdata/api/ endpoints

• Resort Data Processing, Inc. IRM Next Generation
• Hard-coded credentials

Use of Hard-coded Credentials in RDPWin.dll

• Resort Data Processing, Inc. IRM Next Generation
• Hard-coded credentials

Use of Hard-coded Credentials in RDPCore.dll

• Resort Data Processing, Inc. IRM Next Generation
• Hard-coded credentials

Hard-coded credentials in TP-LINK Archer C50 and others

• TP-LINK Archer C50
• TP-LINK Archer C55
• Hard-coded credentials

MXsecurity Hardcoded Credential

• Moxa MXsecurity Series
• Hard-coded credentials

Use of Hard-coded Credentials

• Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator
• Hard-coded credentials

ProfileGrid <= 5.5.0 - Hardcoded Encryption Key

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Hard-coded credentials

Pass-back vulnerability in Nessus

• Tenable Nessus
• Hard-coded credentials

Hard-coded password in Motorola MBTS Base Radio

• Motorola MBTS Base Radio
• Hard-coded credentials

Hard-coded password in Motorola MBTS Site Controller

• Motorola MBTS Site Controller
• Hard-coded credentials

SpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -2

• SPOTCAM CO., LTD. SpotCam FHD 2
• Hard-coded credentials

SpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -1

• SPOTCAM CO., LTD. SpotCam FHD 2
• Hard-coded credentials

Netmaker has Hardcoded DNS Secret Key

• Hard-coded credentials

<0.17.1 || >=0.18.0, <0.18.6 · fixed in 0.17.1, 0.18.6

Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server

• OPTO 22 SNAP PAC S1
• Hard-coded credentials

Hard-coded credentials in Lenovo Notebook

• Lenovo Notebook
• Hard-coded credentials

Unsalted passwords in fobybus/social-media-skeleton

• fobybus social-media-skeleton
• Hard-coded credentials

Jenkins Delphix Plugin vulnerable to exposure of system-scoped credentials

• Hard-coded credentials

<3.0.3 · fixed in 3.0.3

Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials

• Hard-coded credentials

<=1.14 · no fixed version yet

NPort IAW5000A-I/O Series Hardcoded Credential Vulnerability

• Moxa NPort IAW5000A-I/O Series
• Hard-coded credentials

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux

• Broadcom LSI Storage Authority (LSA)
• Hard-coded credentials

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux

• Broadcom LSI Storage Authority (LSA)
• Hard-coded credentials

Insufficiently protected credentials in Google Android

• Google Android
• Hard-coded credentials

Hard-coded credentials in Dataprobe iBoot PDU

• Dataprobe iBoot PDU
• Hard-coded credentials

Hard-coded credentials in Dataprobe iBoot PDU

• Dataprobe iBoot PDU
• Hard-coded credentials

Hard-coded credentials in Intel(R) Unison(TM) software

• Intel(R) Unison(TM) software
• Hard-coded credentials

Hard-coded Cryptographic Key in Kunduz - Homework Helper App

• Sifir Bes Education and Informatics Kunduz - Homework Helper App
• Hard-coded credentials

PHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels

• PHOENIX CONTACT WP 6070-WVPS
• PHOENIX CONTACT WP 6101-WXPS
• Hard-coded credentials

BIG-IP FIPS HSM password vulnerability CVE-2023-3470

• F5 BIG-IP
• Hard-coded credentials

JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials

• JBL soundbar multibeam
• Hard-coded credentials

Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials

• Synel SYnergy Fingerprint Terminals
• Hard-coded credentials

Insufficiently protected credentials in Google Chrome

• Google Chrome
• Hard-coded credentials

Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure

• j_3rk Video Conferencing with Zoom
• Hard-coded credentials

Hard-coded System User Credentials in Folio Data Export Spring module

• Hard-coded credentials

>=2.0.0, <2.0.3 || <1.7.2 · fixed in 2.0.3, 1.7.2

Hard-coded System User Credentials in Folio Data Export Spring module

• Hard-coded credentials

>=2.0.0, <2.0.2 || <1.5.4 · fixed in 2.0.2, 1.5.4