CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.8 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.0 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.8 Critical
- sonicwall sonicos A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in... 5.1 Medium
- skyline communications dataminer Skyline DataMiner BrokerGateway Embedded API Key Authentication Bypass 8.7 High
- kubeflow pipelines Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy 5.8 Medium
- langgenius dify langgenius dify Sandbox Run __init__.py hard-coded credentials 5.3 Medium
- shenzhen shine industrial co., ltd. vitafit VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure 8.7 High
- tata motors ira 2.0, ira.ev +1 more Hardcoded Credentials Vulnerability in Tata Motors iRA and iRA.ev mobile application 8.8 High
- qihoo 360 whole home router m5 Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials 10.0 Critical
- petpooja attendo (formerly petpooja payroll) Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials 8.8 High
- wit synapps runtime WIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials Disclosure 6.9 Medium
- socfortress copilot SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection 9.4 Critical
- songloft-org songloft Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend 8.7 High
- foxit software inc. foxit.com Hardcoded API Token in Foxit Official Website 8.6 High
- alpine ilx-f511 Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability 6.3 Medium
- smci x12spi Supermicro BMC contains a SMCRAKP Fixed Key vulnerability 7.5 High
- part-db part-db-server Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie 6.3 Medium
- kiloview e3 firmware Kiloview E3 NDI Encoder Use of Hard-coded Credentials 8.7 High
- newtype infortech nt oneapp NewType Infortech｜NT OneAPP - Hard-coded Credentials 9.1 Critical
- girafit camera app Girafit Camera App 1.9.1 Hardcoded TURN Credentials Disclosure 6.9 Medium
- cisco telepresence video communication server (vcs) expressway Cisco Expressway Series Remote Code Execution Vulnerability 9.8 Critical
- apache software foundation iotdb Apache IoTDB: Legacy Pipe Privilege Escalation 8.8 High
- best practice software bp premier Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential 9.3 Critical
- ibm security verify access, verify identity access +1 more IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials 8.8 High
-
github.com/envoyproxy/ai-gatewayGo agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable 6.8 Medium - d-link e15, m32, r15 +1 more +3 more D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials 5.3 Medium
- guangzhou juan iot technology co., ltd. eseecloud app, eseecloud firmware +1 more Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials 9.3 Critical
- jooan ja-a12 Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials 9.3 Critical
- energizelab ai station firmware (rk3562) EnergizeLab AI Station Default Root Credentials with SSH Enabled 8.8 High
- error311 filerise FileRise: Insecure default cryptographic key fallback in manual installs 5.9 Medium
- cemtan sar2html cemtan sar2html sar2html.py hard-coded credentials 6.9 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 more Windows Update Orchestrator Service Security Feature Bypass Vulnerability 5.5 Medium
- ibm mcp-context-forge MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery 9.8 Critical
- perforce helix authentication service Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM... 9.3 Critical
- zofe rapyd-admin Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder 9.3 Critical
- meetecho janus-gateway meetecho janus-gateway Admin API admin.js hard-coded credentials 5.3 Medium
- geovision inc. gv-e-map server Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A 6.2 Medium
- ph7software ph7builder pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header 8.7 High
- funnywolf viper FunnyWolf Viper config hard-coded credentials 6.9 Medium
- agnaistic agnai Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose 9.3 Critical
- red lion controls 700 series Red Lion Controls N-Tron 700 Series Use of Hard-Coded Credentials 9.2 Critical
- grid protection alliance openpdc (docker image) Grid Protection Alliance openPDC (Docker image) Use of Hard-coded Credentials 9.3 Critical
- ibm guardium data protection Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection 5.9 Medium
- ibm guardium data protection IBM Guardium Data Protection Hard-coded Credentials 8.4 High
- broadcom brocade active support connectivity gateway, brocade active support connectivity gateway +1 more Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script... 7.0 High
- broadcom brocade active support connectivity gateway, brocade active support connectivity gateway +1 more A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static... 8.4 High
- wavedash co., ltd. ticket ryutsu center The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow... 5.1 Medium
- sipcapture homer Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login 9.8 Critical
- arista networks cloudvision cue Security Advisory 0190 8.7 High
- Show olderLoading…