PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application uses a
An issue pertaining to CWE-259: Use of Hard-coded Password was discovered in oslabs-beta ThermaKube master.
A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector. The remote attackers can th
Eppendorf BioFlo 320 is vulnerable due to VNC server using a hard-coded password. If a remote attacker knows the network
T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded passw
A vulnerability has been found in Beetel 777VR1 up to 01.00.09. The impacted element is an unknown function of the compo
A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. The affected element is an unknow
Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with l
Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low p
Tenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password vulnerability in /etc_ro/shado
Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/sh
An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges and obtain sensitive information v
A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of t
A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this issue is some unknown func
A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file
A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/
A vulnerability has been found in osuuu LightPicture up to 1.2.2. This issue affects some unknown processing of the file
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processi
A flaw has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. The impacted element is an unknown function of
A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of t
Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password.
A security flaw has been discovered in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the fi
A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an unknown function of the co
A vulnerability has been found in SourceCodester Barangay Resident Profiling and Information Management System 1.0. The
A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Lea
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenti
A vulnerability has been found in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of
A flaw has been found in INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App up to 1.0.2 on Android. Affecte
A vulnerability has been found in wandb OpenUI up to 0.0.0.0/1.0. This impacts an unknown function of the file backend/o
A security flaw has been discovered in Beetel 777VR1 up to 01.00.09. This issue affects some unknown processing of the c
Hardcoded Password Vulnerability have been found in CENTUM. Affected products contain a hardcoded password for the user
In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed
Frequently Asked Questions
What is CWE-259?
CWE-259 (CWE-259) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-259?
There are 32 CVE records associated with CWE-259 in our database. Of these, 5 are critical severity, 15 are high severity, and 6 are medium severity.
How can I protect against CWE-259 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-259 using AI-powered security agents.
Detect CWE-259 Vulnerabilities
CyberStrike's AI agents automatically detect cwe-259 vulnerabilities across your infrastructure.
Get Started