The product contains hard-coded credentials, such as a password or cryptographic key.
1,713 vulnerabilities with CWE-798
CVE-2024-27774
HIGH
Unitronics Unistream Unilogic - Info Disclosure
CVSS 7.5
CVE-2024-28194
CRITICAL
your_spotify < 1.8.0 - Authentication Bypass via Hardcoded JWT Secret
CVSS 9.1
CVE-2024-25731
HIGH
Elink Smart eSmartCam 2.1.5 - Use of Hard-coded AES Encryption Keys
CVSS 7.5
CVE-2024-24681
CRITICAL
Yealink Configuration Encrypt Tool <1.2 - Info Disclosure
CVSS 9.8
CVE-2024-1661
LOW
Totolink X6000R 9.4.0cu.852_B20230719 - Use of Hard-coded Credentials in /etc/shadow
CVSS 2.5
CVE-2024-1344
MEDIUM
LaborOfficeFree 19.10 - Use of Hard-coded Credentials in Database Configuration
CVSS 6.8
CVE-2024-0390
CRITICAL
inprax izzi_connect < 2024010401 - Use of Hard-coded MQTT Credentials
CVSS 9.8
CVE-2024-23816
CRITICAL
Siemens Location Intelligence < 4.3 - Unauthenticated Administrative Access via Hard-coded Secret
CVSS 9.8
CVE-2024-22313
MEDIUM
IBM Storage Defender - Resiliency Service 2.0 - Info Disclosure
CVSS 6.2
CVE-2024-22853
CRITICAL
D-LINK Go-RT-AC750 - Code Injection
CVSS 9.8
CVE-2024-21764
CRITICAL
Rapid SCADA < 5.8.4 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2024-1039
CRITICAL
Gessler GmbH WEB-MASTER Firmware - Improper Authentication via Hardcoded Credentials
CVSS 9.8
CVE-2024-24324
CRITICAL
TOTOLINK A8000RU v7.1cu.643_B20200521 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2024-23619
CRITICAL
IBM Merge Healthcare eFilm Workstation < 4.2 - Unauthenticated Hardcoded Credential Use
CVSS 9.8
CVE-2024-23453
MEDIUM
spooncast/spoon 7.11.1-8.6.0 - Hard-coded Credentials Exposure
CVSS 5.5
CVE-2024-23842
HIGH
Hitron LGUVR-16H Firmware 1.02-4.02 - Unauthenticated Network Attack via Default Credentials
CVSS 7.4
CVE-2024-22772
HIGH
Hitron Systems DVR LGUVR-8H <4.02 - Info Disclosure
CVSS 7.4
CVE-2024-22771
HIGH
Hitron Systems DVR LGUVR-4H <4.02 - Info Disclosure
CVSS 7.4
CVE-2024-22770
HIGH
Hitron Systems DVR HVR-16781 <4.02 - Info Disclosure
CVSS 7.4
CVE-2024-22769
HIGH
Hitron Systems DVR HVR-8781 <4.02 - Info Disclosure
CVSS 7.4
CVE-2024-22768
HIGH
Hitron Systems DVR HVR-4781 <4.02 - Info Disclosure
CVSS 7.4
CVE-2024-23726
HIGH
Ubee DDW365 XCNDDW365 - Use of Hard-coded Credentials via Predictable WPA2 PSK
CVSS 8.8
CVE-2024-23687
CRITICAL
FOLIO mod-data-export-spring <1.5.4 and 2.0.0-2.0.2 - Unauthenticated Use of Hard-coded Credentials
CVSS 9.1
CVE-2024-23685
MEDIUM
mod-remote-storage <1.7.2 and 2.0.0-2.0.3 - Unauthenticated Unauthorized Data Access via Hard-coded Credentials
CVSS 5.3
CVE-2023-27573
CRITICAL
netbox-docker < 2.5.0 - Use of Default Credentials
CVSS 9.0
Details
Vulnerabilities
1,713
Exploit Likelihood
High