CWE-798

1,719 vulnerabilities with CWE-798

CVE-2022-26020 MEDIUM

InHand Networks InRouter302 V3.5.4 - Info Disclosure

CVSS 6.5

CVE-2022-23724 MEDIUM

PingIdentity PingID Integration for Windows Login <= 2.4.2 - Authentication Bypass

CVSS 6.4

CVE-2022-29856 HIGH

Automation360 22 - Use of Hard-coded Cryptographic Key

CVSS 7.5

CVE-2022-23942 HIGH

Apache Doris <1.0.0 - Info Disclosure

CVSS 7.5

CVE-2022-26672 HIGH

ASUS WebStorage < 3.10.2 - Unauthenticated Use of Hard-coded Credentials

CVSS 7.3

CVE-2022-20773 HIGH

Cisco Umbrella Virtual Appliance (VA) - Privilege Escalation

CVSS 7.5

CVE-2022-24860 HIGH

Databasir 1.01 - Use of Hard-coded Cryptographic Key

CVSS 7.4

CVE-2022-28810 MEDIUM KEV

ManageEngine ADSelfService Plus Custom Script Execution

CVSS 6.8

CVE-2022-27506 LOW

Citrix SD-WAN Firmware < 11.4.1 - Use of Hard-coded Credentials via SD-WAN CLI

CVSS 2.7

CVE-2022-22560 HIGH

Dell EMC PowerScale OneFS - Hard Coded Credentials

CVSS 7.1

CVE-2022-26671 HIGH

Taiwan Secom Dr.ID Access Control - Info Disclosure

CVSS 7.3

CVE-2022-23440 HIGH

FortiEDR 4.0.0-5.0.2 - Use of Hard-coded Cryptographic Key in Registration Mechanism

CVSS 7.8

CVE-2022-23441 CRITICAL

FortiEDR 4.0.0, 5.0.0-5.0.2 - Unauthenticated Message Forgery via Hard-coded Cryptographic Key

CVSS 9.1

CVE-2022-1162 CRITICAL

GitLab 14.7-14.7.6, 14.8-14.8.4, 14.9-14.9.1 - Authentication Bypass via Hardcoded OmniAuth Password

CVSS 9.1

CVE-2022-25569 CRITICAL

Bettinivideo Sgsetup - Hard-coded Credentials

CVSS 9.8

CVE-2022-24693 CRITICAL

Baicells Nova436Q & Neutrino 430 - Info Disclosure

CVSS 9.8

CVE-2022-25521 CRITICAL

NUUO Network Video Recorder Firmware < 1.0 - Use of Hard-coded Credentials

CVSS 9.8

CVE-2022-25577 CRITICAL

alf-banco < 8.2.5 - Use of Hard-coded Credentials for SQLite Database Encryption

CVSS 9.1

CVE-2022-26660 HIGH

RunAsSpc 4.0 - Use of Hard-coded Credentials

CVSS 7.5

CVE-2022-25246 CRITICAL

PTC Axeda Agent and Desktop Server - Use of Hard-coded Credentials

CVSS 9.8

CVE-2022-23402 CRITICAL

Yokogawa CENTUM VP R5.01.00-R5.04.20 and R6.01.00-R6.08.00 and Exaopc R3.72.00-R3.79.00 - Use of Hard-coded Credentials

CVSS 9.8

CVE-2022-21194 CRITICAL

Yokogawa CENTUM VP R5.01.00-R5.04.20 and R6.01.00-R6.08.00 and Exaopc R3.72.00-R3.79.00 - Use of Hard-coded Credentials

CVSS 9.8

CVE-2022-25510 HIGH

FreeTAKServer < 1.9.8.5 - Authentication Bypass via Hardcoded Flask Secret Key

CVSS 8.8

CVE-2022-25217 HIGH

Phicomm K2 <22.5.9.163 & K3C <32.1.15.93 - Unauthenticated Root Shell via Hard-coded RSA Key

CVSS 7.8

CVE-2022-25213 MEDIUM

Phicomm K2/K2G/K2P/K3/K3C Firmware - Unauthenticated Root Shell via UART Port

CVSS 6.8