The product contains hard-coded credentials, such as a password or cryptographic key.
1,721 vulnerabilities with CWE-798
CVE-2018-18978
HIGH
Ascensia Contour Diabetes < 2.5.0 - Use of Hard-coded Encryption Key
CVSS 7.4
CVE-2018-4062
HIGH
Sierra Wireless AirLink ES450 Firmware 4.9.3 - Hard-coded Credentials in SNMPD
CVSS 8.1
CVE-2018-18251
CRITICAL
Deltek Vision 7.0-7.5 - Authenticated SQL Injection via Custom RPC over HTTP Protocol
CVSS 9.8
CVE-2018-20219
HIGH
Teracue ENC-400 <2.56 - Auth Bypass
CVSS 8.1
CVE-2018-18473
CRITICAL
PATLITE NH-FB <=1.45, NH-FV <=1.10, NBM <=1.09 - Hard-coded Credentials via _secret1.htm
CVSS 9.8
CVE-2018-17492
HIGH
EasyLobby Solo - Privilege Escalation
CVSS 8.4
CVE-2018-1944
MEDIUM
IBM Security Identity Governance And Intelligence < 5.2.4.1 - Hard-coded Credentials
CVSS 5.1
CVE-2018-15781
HIGH
Dell Wyse ThinLinux 2.0-2.1.0.01 - Unauthenticated Hard-coded Cryptographic Key in Password Encoder
CVSS 7.9
CVE-2018-18998
CRITICAL
LCDS Laquis SCADA < 4.1.0.4150 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2018-5560
CRITICAL
Practecol's Guardzilla - Info Disclosure
CVSS 10.0
CVE-2018-1959
MEDIUM
IBM Security Identity Manager 7.0.1 - Use of Hard-coded Credentials
CVSS 5.1
CVE-2018-16201
HIGH
Toshiba HEM-GW16A and HEM-GW26A < 1.2.9 - Use of Hard-coded Credentials
CVSS 8.8
CVE-2018-16186
HIGH
RICOH Interactive Whiteboard D2200/D5500/D5510/D5520/D6500/D6510/D7500/D8400 Firmware 1.1-2.2 Hard-coded Credentials
CVSS 8.8
CVE-2018-1000625
CRITICAL
Battelle V2I Hub <2.5.1 - Info Disclosure
CVSS 9.8
CVE-2018-7800
CRITICAL
EVLink Parking <3.2.0-12_v1 - Info Disclosure
CVSS 9.8
CVE-2018-18009
CRITICAL
D-Link DIR-140L and DIR-640L Firmware - Unauthenticated Hard-coded Credentials Exposure
CVSS 9.8
CVE-2018-18008
CRITICAL
D-Link DSL-2770L, DIR-140L, DIR-640L, DWR-116, DWR-512, DWR-555, DWR-921 - Unauthenticated Admin Credential Exposure
CVSS 9.8
CVE-2018-18007
CRITICAL
D-Link DSL-2770L Firmware - Unauthenticated Hard-coded Credential Exposure via atbox.htm
CVSS 9.8
CVE-2018-15720
CRITICAL
Logitech Harmony Hub < 4.15.206 - Use of Hard-coded Credentials in XMPP Server
CVSS 9.8
CVE-2018-19233
HIGH
COMPAREX Miss Marple Enterprise Edition <2.0 - Code Injection
CVSS 7.8
CVE-2018-18006
CRITICAL
Ricoh myPrint - Use of Hard-coded Credentials
CVSS 9.8
CVE-2018-1887
MEDIUM
IBM Security Access Manager 9.0.1.0-9.0.5.0 - Use of Hard-coded Credentials
CVSS 5.9
CVE-2018-1818
MEDIUM
IBM Security Guardium 10.0-10.5 - Use of Hard-coded Credentials
CVSS 5.9
CVE-2018-1650
MEDIUM
IBM QRadar Incident Forensics 7.2.0-7.2.8 - Authentication Bypass via Hard-coded Credentials
CVSS 5.9
CVE-2018-0468
HIGH
Cisco Energy Management Suite - Use of Hard-coded Credentials in PostgreSQL Database
CVSS 7.8
Details
Vulnerabilities
1,721
Exploit Likelihood
High