The product contains hard-coded credentials, such as a password or cryptographic key.
1,719 vulnerabilities with CWE-798
CVE-2021-41320
MEDIUM
Wallstreet Suite TRM 7.4.83 - Use of Hard-coded Credentials
CVSS 5.5
CVE-2021-38456
CRITICAL
Moxa MXview <3.2.2 - Info Disclosure
CVSS 9.8
CVE-2021-34757
MEDIUM
Cisco Business 220 Series - Privilege Escalation
CVSS 4.9
CVE-2021-34744
MEDIUM
Cisco Business 220 Series - Privilege Escalation
CVSS 4.9
CVE-2021-33583
CRITICAL
REINER timeCard 6.05.07 - SQL Injection
CVSS 9.8
CVE-2021-41299
CRITICAL
ECOA BAS Controller - Use of Hard-coded Credentials
CVSS 9.8
CVE-2021-41828
HIGH
Zoho ManageEngine Remote Access Plus < 10.1.2121.1 - Use of Hard-coded Credentials in resetPWD.xml
CVSS 7.5
CVE-2021-41827
HIGH
Zoho ManageEngine Remote Access Plus < 10.1.2121.1 - Hardcoded Credentials in DCBackupRestore JAR Archive
CVSS 7.5
CVE-2021-21913
CRITICAL
D-LINK DIR-3040 1.13B03 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2021-34571
MEDIUM
Enbra EWM - Use of Hard-coded Credentials in Security Mode 5
CVSS 6.5
CVE-2021-28813
CRITICAL
QSW-M2116P-2T2S, QNAP switches - Info Disclosure
CVSS 9.6
CVE-2021-28912
HIGH
BAB TECHNOLOGIE eibPort V3 < 3.9.1 - Weak Hardcoded Root SSH Key Passphrase
CVSS 7.2
CVE-2021-33484
HIGH
OnyakTech Comments Pro 3.8 - Info Disclosure
CVSS 7.5
CVE-2021-40494
CRITICAL
AdaptiveScale LXDUI < 2.1.3 - Hardcoded JWT Secret Key in metadata.py
CVSS 9.8
CVE-2021-36234
MEDIUM
MIK.starlight 7.9.5.24363 - Info Disclosure
CVSS 5.5
CVE-2021-34565
CRITICAL
PEPPERL+FUCHS WirelessHART-Gateway 3.0.7-3.0.9 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2021-29728
MEDIUM
IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 - Use of Hard-coded Credentials
CVSS 4.9
CVE-2021-39615
CRITICAL
D-Link DSR-500N 1.02 - Use of Hard-coded Credentials in /etc/passwd
CVSS 9.8
CVE-2021-39614
CRITICAL
D-Link DVX-2000MS Firmware - Use of Hard-coded Credentials in /etc/passwd
CVSS 9.8
CVE-2021-39613
CRITICAL
D-Link DVG-3104MS 1.0.2.0.3, 1.0.2.0.4, and 1.0.2.0.4E - Use of Hard-coded Credentials
CVSS 9.8
CVE-2021-39245
HIGH
Altus Nexto, Nexto Xpress, and Hadron Xtorm - Hardcoded Credentials in .htaccess for getlogs.cgi
CVSS 7.5
CVE-2021-32588
CRITICAL
FortiPortal <=6.0.4 Unauthenticated RCE via Tomcat Hard-coded Credentials
CVSS 9.8
CVE-2021-27952
CRITICAL
ecobee3 lite 4.5.81.200 - Info Disclosure
CVSS 9.8
CVE-2021-27503
MEDIUM
Ypsomed mylife <1.7.2-1.7.5 - Info Disclosure
CVSS 4.8
CVE-2021-37163
CRITICAL
HMI3 Control Panel Firmware < 7.2.5.7 - Use of Hard-coded Credentials
CVSS 9.8
Details
Vulnerabilities
1,719
Exploit Likelihood
High