CWE-321

High likelihood

Use of Hard-coded Cryptographic Key

Parent: CWE-798 - Use of Hard-coded Credentials

The product uses a hard-coded, unchangeable cryptographic key.

276 vulnerabilities with CWE-321
CVE-2025-14651 LOW
MartialBE one-hub <0.14.27 - Code Injection
CVSS 3.7
CVE-2025-54947 CRITICAL
Apache Streampark < 2.1.7 - Information Disclosure
CVSS 9.8
CVE-2025-34256 CRITICAL
Advantech WISE-DeviceOn Server <5.4 - Auth Bypass
CVSS 9.8
CVE-2025-13948 MEDIUM
opsre go-ldap-admin <20251011 - Info Disclosure
CVSS 5.6
CVE-2025-66454 MEDIUM
Arcade MCP <1.5.4 - Auth Bypass
CVSS 6.5
CVE-2025-13877 MEDIUM
Nocobase <2.0.0-alpha.37 - Unknown Vuln
CVSS 5.6
CVE-2025-11781 HIGH
Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 - Privilege Escalation
CVSS 7.8
CVE-2025-6666 LOW
motogadget mo.lock Ignition Lock <20251125 - Info Disclosure
CVSS 2.0
CVE-2025-64304 MEDIUM
FOD App - Info Disclosure
CVSS 4.0
CVE-2025-65998 HIGH
Apache Syncope - Info Disclosure
CVSS 7.5
CVE-2025-13316 HIGH
Twonky Server 8.5.2 - Info Disclosure
CVSS 8.1
CVE-2025-63289 CRITICAL
Sogexia Android App - Info Disclosure
CVSS 9.1
CVE-2025-12177 MEDIUM
WordPress Download Manager <3.3.30 - Auth Bypass
CVSS 5.3
CVE-2025-12615 MEDIUM
PHPGurukul News Portal 1.0 - Info Disclosure
CVSS 5.0
CVE-2025-12599 CRITICAL
BLU-IC2, IC4 <1.19.5 - Info Disclosure
CVSS 9.8
CVE-2025-54471 MEDIUM
NeuVector - Info Disclosure
CVSS 6.5
CVE-2025-46582 HIGH
ZTE ZXMP M721 - Info Disclosure
CVSS 7.7
CVE-2025-34500 HIGH
Deck Mate 2 - RCE
CVE-2025-56802 MEDIUM
Reolink desktop app - Info Disclosure
CVSS 5.1
CVE-2025-56801 MEDIUM
Reolink Desktop App 8.18.12 - Info Disclosure
CVSS 5.1
CVE-2025-11899 HIGH
Agentflow - Code Injection
CVSS 8.1
CVE-2025-58426 MEDIUM
desknet's NEO <9.0R2.0 - Code Injection
CVSS 4.3
CVE-2025-11609 LOW
Code-projects Hospital Management System 1.0 - Code Injection
CVSS 3.7
CVE-2025-35052 MEDIUM
Newforma Info Exchange - Path Traversal
CVSS 5.3
CVE-2025-11290 MEDIUM
CRMEB <5.6.1 - Code Injection
CVSS 5.6
Details
Vulnerabilities 276
Exploit Likelihood High