CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- picotronica e-clinic healthcare system echsPicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentials6.9 Medium
ogham-mcpPyPIogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API keyNo score- scott paterson easy-paypal-events-ticketsEasy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning8.7 High
- d-link dir-456u firmwareD-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials9.8 Critical
- d-link dir-600l firmwareD-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials9.8 Critical
- d-link dir-600l firmwareD-Link DIR-600L B1 Hardcoded Telnet Backdoor Credentials9.8 Critical
- d-link dir-605l firmwareD-Link DIR-605L B2 Hardcoded Telnet Backdoor Credentials9.8 Critical
- d-link dir-605l firmwareD-Link DIR-605L A1 Hardcoded Telnet Backdoor Credentials8.8 High
- astrbotdevs astrbotAstrBotDevs AstrBot Dashboard auth.py hard-coded credentials6.9 Medium
- snap one, llc wattbox 800, wattbox 820 +1 moreWattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints9.2 Critical
- milesight ms-c2964-rflpc, ms-c2966-rflwpc, ms-c2966-x12rlpc +79 more +81 moreMilesight Cameras Use of Hard-coded Credentials7.7 High
- senselive x3050, x3500 firmware +1 moreSenseLive X3050 Use of Hard-coded Credentials9.3 Critical
- liangliangyy djangoblogliangliangyy DjangoBlog Setting settings.py hard-coded credentials6.3 Medium
- liangliangyy djangoblogliangliangyy DjangoBlog Setting settings.py hard-coded credentials6.3 Medium
- osuuu lightpictureosuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials6.9 Medium
- flowiseFlowise - Weak Default Token Hash Secret in JWT Token Encryption4.3 Medium
- flowiseFlowise - Session Hijacking via Weak Default Express Session Secret9.3 Critical
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Hardcoded Credential in Internal Database Component9.2 Critical
- schneider electric easergy micom p14x, easergy micom p24x, easergy micom p341 +9 more +11 moreCWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access...6.9 Medium
- bmc control-m\/managed file transferAn issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A set of default debug user...9.8 Critical
- mvirik text to speech – ttswpText to Speech (TTS) by Mementor <= 1.9.8 - Use of Hardcoded Password to Unauthenticated Remote Database Access7.5 High
- belden garrettcom magnum 6k and 10k managed switchesGarrettCom Magnum 6K and 10K Authentication Bypass via Hardcoded String9.3 Critical
- gardyn mobile application, cloud api +1 moreGardyn Mobile Application and Device Firmware Use Hard-coded Credentials8.8 High
- metronik mepis rmCredential Exposure vulnerability in MEPIS RM6.4 Medium
- al-ko robolinho update softwareHard-coded AWS Key in AL-KO Robolinho Update Software6.9 Medium
- microchip time provider 4100, timeprovider 4100 firmware +1 moreHardcoded Upgrade Decryption Passwords5.5 Medium
- wandb openuiwandb OpenUI config.py hard-coded credentials4.8 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by SQL Injection8.3 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Hardcoded Sensitive Data7.3 High
- ibm concertMultiple Vulnerabilities in IBM Concert Software6.2 Medium
- addi – cuotas que se adaptan a tiWordPress Addi – Cuotas que se adaptan a ti plugin <= 2.0.4 - Broken Authentication vulnerability7.5 High
- tp-link archer nx200 firmware, archer nx210 firmware, archer nx500 firmware +12 more +14 moreHardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX6008.5 High
- harborUse of hard coded credentials in GoHarbor Harbor9.4 Critical
- bri klinikaxp, klinikaxp insertino +1 moreHard-coded passwords in KlinikaXP8.7 High
- qnap qunetswitchQuNetSwitch6.8 Medium
- error311 fileriseFileRise: Default Encryption Key Enables Token Forgery and Config Decryption8.2 High
- yi technology home cameraYi Technology YI Home Camera ipc hard-coded credentials8.7 High
- danvei233 xiaoheifsxiaoheiFS Vulnerable to RCE via Arbitrary Payment Plugin Upload (Automatic Execution)7.2 High
- No product listedThe web interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) contains...9.1 Critical
- index conferences & exhibitions organization ywf bpof apgcs appINDEX Conferences & Exhibitions Organization YWF BPOF APGCS App ae.index.apgcs BuildConfig.java hard-coded credentials4.8 Medium
- i-sens smartlog appi-SENS SmartLog App air.SmartLog.android hard-coded credentials4.8 Medium
- zkteco inc. zkbiosecurityZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp6.8 Medium
- zkteco inc. zkbiosecurityZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote Code Execution9.3 Critical
- syslink software ag avantraLegacy built-in user account7.2 High
- stalin-143 websiteNEXULEAN API Key Leak8.2 High
- trane tracer concierge, tracer sc, tracer sc+ +2 more +4 moreUse of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge8.2 High
- ewoneWON Firmware 12.2-13.0 Authentication Bypass via wsdReadForm8.7 High
- micro research ltd. mr-gm5a-l1, mr-gm5l-s1 +1 moreUse of hard-coded credentials issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an...9.3 Critical
- netbox-community netbox-dockernetbox-docker before 2.5.0 has a superuser account with default credentials (admin password for...9.0 Critical
- schneider electric ecostruxure™ it data center expert (formerly known as struxureware data center expert)CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information...7.5 High
- Show moreLoading…