CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...4.4 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.5 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.5 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.5 High
- No product listedAn issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded...9.8 Critical
- eclipse foundation aeriosIn the current development version of Eclipse aeriOS, for which no official release has yet been...9.9 Critical
- itsourcecode student management systemningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentials6.9 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...6.5 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.7 High
- sourcecodester syllabus-aligned learning management & examination systemSourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials6.9 Medium
- tenda cp3Tenda CP3 hostapd hard-coded credentials5.1 Medium
- tycon systems tpdin-monitor-web3Tycon Systems TPDIN-Monitor-WEB3 Use of Hard-coded Credentials7.1 High
- ibm qradarQRadar contains hard-coded credentials6.7 Medium
- lightstar smartit desktop managerLightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials6.9 Medium
- lightstar smartit desktop managerLightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials9.3 Critical
- lightstar smartit desktop managerLightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials9.3 Critical
- asus control center enterprise (acc)Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard...10.0 Critical
- themoos core-moosMOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrase7.1 High
- peppermint lab peppermintPeppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml9.3 Critical
- rockwell automation dataedgeplatform datamosaix™ private cloudDataEdgePlatform DataMosaix™ Private Cloud8.7 High
- tmt machine industry and trade ltd. co. talassoft industrial management softwareHardcoded Credentials in TMT Machine's Talassoft Industrial Management Software9.1 Critical
- inbox foundry activeinbox extensionInbox Foundry ActiveInbox Extension Google OAuth Client Secret service-worker.production-esm.js hard-coded credentials6.9 Medium
- No product listedInsecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers...9.8 Critical
- shinobi systems shinobiShinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key9.3 Critical
- cp plus cp-xr-de21-s routerHardcoded Credentials Vulnerability in CP Plus CP-XR-DE21-S Router8.7 High
- watchguard fireware osFireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint9.3 Critical
- bendix ec80esp 2nd can, ec80esp 4s/4m, ec80esp 6s/6m +7 more +9 moreUse of Hard-coded Credentials in Bendix EC80 Brake ECU5.3 Medium
- No product listedA vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to...7.5 High
- tubitak bilgem software technologies research institute liderahenkUse of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk9.1 Critical
- resamania virtuagymEmbedded credentials in Virtuagym8.6 High
- furuno electric co., ltd. fa-50FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has...8.8 High
- dji air 3, air 3s, avata 2 +13 more +15 moreDJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory9.3 Critical
- vas3k taxhackervas3k TaxHacker JWT Secret config.ts envSchema.parse hard-coded credentials6.9 Medium
- yamaha corporation vocaloid6Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to...6.9 Medium
- splunk ai toolkitUse of Hard-coded Credentials in Container Connections in Splunk AI Toolkit5.4 Medium
- shenzhen cudy technology co., ltd. wr3000 2.0, p5 v1.1 +1 moreCudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT9.3 Critical
- No product listedAn issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6. If you identify a projector...9.8 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secrets8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Hardcoded Secret Key8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Hardcoded Database Credentials8.7 High
- acer planet9 desktop applicationPlanet9 Hardcoded Credentials Vulnerability Information6.6 Medium
- lb-link x-proLB-LINK X-PRO easycwmp hard-coded credentials9.2 Critical
- lb-link x-proLB-LINK X-PRO shadow hard-coded credentials9.2 Critical
- emlogEmlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover6.8 Medium
- dell wyse management suite (wms), wyse management suite +1 moreDell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded...6.3 Medium
- roskus prospero flow crmUse of hard-coded credentials in Prospero Flow CRM employee onboarding9.3 Critical
- ibm storage scaleThe following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher7.5 High
- flow neuroscience fl-100Flow Neuroscience FL-100 Use of Hard-coded Credentials7.2 High
- cyberpanelCyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal9.3 Critical
- priority portal generator addon to priority erp (developed by soft solutions)Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control9.3 Critical
- Show moreLoading…