CWE-798

1,755 vulnerabilities with CWE-798

CVE-2024-38648 MEDIUM

Ivanti DSM <2024.2 - Info Disclosure

CVSS 5.7

CVE-2024-13688 MEDIUM

Admin and Site Enhancements WordPress Plugin < 7.6.10 - Hardcoded Credentials Bypass via Password Protection Feature

CVSS 5.3

CVE-2024-41794 CRITICAL

SENTRON 7KT PAC1260 Data Manager - Use of Hard-coded Credentials

CVSS 10.0

CVE-2024-13773 HIGH

Civi - Job Board & Freelance Marketplace <2.1.4 - Info Disclosure

CVSS 7.3

CVE-2024-9334 HIGH

E-Kent Pallium Vehicle Tracking <17.10.2024 - Auth Bypass

CVSS 8.2

CVE-2024-57040 CRITICAL

TP-Link TL-WR845N Firmware < 250401 - Use of Hard-coded Credentials

CVSS 9.8

CVE-2024-50688 CRITICAL

SunGrow iSolarCloud < 2.1.6.20241104 - Use of Hard-coded Credentials

CVSS 9.8

CVE-2024-52902 HIGH

IBM Cognos Controller 11.0.0-11.0.1 FP3 and IBM Controller 11.1.0 - Use of Hard-coded Credentials

CVSS 8.8

CVE-2024-8893 HIGH

GoodWe Technologies Co., Ltd. GW1500-XS - Info Disclosure

CVSS 7.3

CVE-2024-57790 MEDIUM

IXon IXrouter IX2400 <3.0 - Privilege Escalation

CVSS 5.4

CVE-2024-28989 MEDIUM

SolarWinds Web Help Desk - Info Disclosure

CVSS 5.5

CVE-2024-46436 HIGH

Tenda W18E V16.01.0.8(1625) - Unauthenticated Remote Root Access via Hardcoded Telnet Credentials

CVSS 8.3

CVE-2024-46433 HIGH

Tenda W18E V16.01.0.8(1625) - Unauthenticated Default Credentials Use

CVSS 8.8

CVE-2024-46429 HIGH

Tenda W18E V16.01.0.8(1625) - Unauthenticated Hardcoded Credentials

CVSS 8.8

CVE-2024-36556 CRITICAL

Forever KidsWatch - Hardcoded Password

CVSS 9.1

CVE-2024-51547 CRITICAL

ABB ASPECT-Enterprise, NEXUS Series, MATRIX Series < 3.08.03 - Use of Hard-coded Credentials

CVSS 9.8

CVE-2024-9643 CRITICAL

Four-Faith F3x36 Firmware v2.0.0 - Authentication Bypass via Hard-Coded Credentials

CVSS 9.8

CVE-2024-53357 HIGH

EasyVirt CO2Scope < 1.3.0 and DCScope < 8.6.0 - Authenticated SQL Injection via User and Group Management APIs

CVSS 7.5

CVE-2024-53356 CRITICAL

EasyVirt CO2Scope < 1.3.0 and DCScope < 8.6.0 - Use of Hard-coded Credentials for JWT Generation

CVSS 9.8

CVE-2024-50692 MEDIUM

SunGrow WiNet-S < 200.001.00.p027 - Use of Hard-coded MQTT Credentials

CVSS 5.4

CVE-2024-50690 MEDIUM

SunGrow WiNet-S < 200.001.00.p027 - Use of Hard-coded Credentials

CVSS 6.5

CVE-2024-55927 HIGH

Xerox Workplace Suite - Auth Bypass

CVSS 7.6

CVE-2024-11147 HIGH

ECOVACS Robot Lawnmowers and Vacuums - Use of Hard-coded Credentials

CVSS 7.6

CVE-2024-45832 MEDIUM

Ossur Mobile Logic Application < 1.5.5 - Use of Hard-coded Credentials

CVSS 4.3

CVE-2024-48126 CRITICAL

HI-SCAN 6040i Hitrax HX-03-19-I - Info Disclosure

CVSS 9.8