The product contains hard-coded credentials, such as a password or cryptographic key.
1,755 vulnerabilities with CWE-798
CVE-2023-46943
CRITICAL
NPM @evershop/evershop <1.0.0-rc.8 - Info Disclosure
CVSS 9.1
CVE-2023-28897
MEDIUM
Škoda Superb III 2022 - Info Disclosure
CVSS 4.0
CVE-2023-49256
HIGH
Product <Version> - Info Disclosure
CVSS 7.5
CVE-2023-49253
CRITICAL
Root User Password Hardcoded - Info Disclosure
CVSS 9.8
CVE-2023-50124
MEDIUM
Flient Smart Door Lock v1.0 - Use of Hard-coded Credentials in Debug Interface
CVSS 6.8
CVE-2023-48251
HIGH
Bosch NEXO-OS 1000-1500 < 1500-sp2 - Unauthenticated Remote Root Authentication via Hard-coded SSH Credentials
CVSS 8.1
CVE-2023-48250
HIGH
Bosch NEXO-OS < 1500-sp2 - Unauthenticated Use of Hard-coded Credentials
CVSS 8.1
CVE-2023-50974
MEDIUM
Appwrite CLI < 3.0.0 - Unprotected Credential Exposure via Prefs.json File
CVSS 5.5
CVE-2023-50948
MEDIUM
IBM Storage Fusion HCI <2.7 - Info Disclosure
CVSS 6.5
CVE-2023-37608
HIGH
Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 - Use of Hard-coded Credentials
CVSS 7.5
CVE-2023-49228
MEDIUM
Peplink Balance Two <8.4.0 - Command Injection
CVSS 6.4
CVE-2023-46918
MEDIUM
Phlox com.phlox.simpleserver.plus 1.8.1-plus - Info Disclosure
CVSS 4.6
CVE-2023-46919
MEDIUM
Phlox Simple HTTP Server 1.8 - Info Disclosure
CVSS 6.3
CVE-2023-46711
MEDIUM
Buffalo VR-S1000 Firmware < 2.37 - Use of Hard-coded Cryptographic Key
CVSS 4.6
CVE-2023-40236
MEDIUM
Pexip Virtual Meeting Rooms < 3.0 - Authentication Bypass via Hard-coded SSH Host Key
CVSS 5.3
CVE-2023-47704
MEDIUM
IBM Security Guardium Key Lifecycle Manager 4.2.0-4.2.0.2 - Use of Hard-coded Credentials
CVSS 4.0
CVE-2023-43870
HIGH
Paxton Access Net2 - Use of Hard-coded Credentials in Root Certificate
CVSS 8.1
CVE-2023-48392
CRITICAL
Kaifa WebITR Attendance System - Unauthenticated Account Access via Hard-coded Cryptographic Key
CVSS 9.8
CVE-2023-48388
CRITICAL
Multisuns EasyLog web+ - Use of Hard-coded Credentials
CVSS 9.8
CVE-2023-48374
MEDIUM
SmartStar Software CWS - Use of Hard-coded Credentials
CVSS 6.5
CVE-2023-43583
MEDIUM
Zoom Meeting SDK < 5.16.0 - Use of Hard-coded Credentials
CVSS 4.9
CVE-2023-36651
HIGH
ProLion CryptoSpike 3.0.15P2 - Auth Bypass
CVSS 7.2
CVE-2023-36647
HIGH
ProLion CryptoSpike 3.0.15P2 - Auth Bypass
CVSS 7.5
CVE-2023-40300
CRITICAL
NETSCOUT nGeniusPULSE 3.8 - Use of Hard-coded Cryptographic Key
CVSS 9.8
CVE-2023-33413
HIGH
Supermicro X11/M11 <3.17.02 - Command Injection
CVSS 8.8
Details
Vulnerabilities
1,755
Exploit Likelihood
High