CWE-321

ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which c

ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption ke

Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to rea

A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows

ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vu

A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret H

A vulnerability was detected in nocobase up to 1.9.4/2.0.0-alpha.37. The affected element is an unknown function of the

A vulnerability was determined in opsre go-ldap-admin up to 20251011. This issue affects some unknown processing of the

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive in

Use of hard-coded cryptographic key vulnerability in i-PRO Configuration Tool affects the network system for i-PRO Co.,

A low privileged local attacker can abuse the affected service by using a hardcoded cryptographic key.

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. An attacker can gain access to sal

The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerabili

Newforma Info Exchange (NIX) uses a hard-coded key to encrypt certain query parameters. Some encrypted parameter values

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the d

The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB

The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files

A vulnerability was found in FastCMS 0.1.5. It has been declared as critical. This vulnerability affects unknown code of

A weakness has been identified in DJI Mavic Spark, Mavic Air and Mavic Mini 01.00.0500. Affected is an unknown function

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwo

Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passw

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a48

desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious

A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.

"FOD" App uses hard-coded cryptographic keys, which may allow a local unauthenticated attacker to retrieve the cryptogra

Use of hard-coded cryptographic key issue exists in BizRobo! all versions. Credentials inside robot files may be obtaine

A vulnerability has been found in PerfreeBlog 4.0.11 and classified as problematic. This vulnerability affects the funct

A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been declared as problematic. This vulnerability aff

A vulnerability was found in TRENDnet TN-200 1.02b02. It has been declared as problematic. This vulnerability affects un

A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file backe

IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain

A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component

A vulnerability has been found in MartialBE one-hub up to 0.14.27. This vulnerability affects unknown code of the file d

A security flaw has been discovered in CouchCMS up to 2.4. Affected is an unknown function of the file couch/config.exam

A security flaw has been discovered in getmaxun maxun up to 0.0.28. Impacted is an unknown function of the file /getmaxu

A security vulnerability has been detected in actiontech sqle up to 4.2511.0. The impacted element is an unknown functio

A vulnerability was detected in PandaXGO PandaX up to fb8ff40f7ce5dfebdf66306c6d85625061faf7e5. This affects an unknown

A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versio

A vulnerability has been found in running-elephant Datart up to 1.0.0-rc3. Affected by this issue is the function getTok

A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an

This vulnerability exists in Tapo C500 Wi-Fi camera due to hard-coded RSA private key embedded within the device firmwar

Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them wit

A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC

Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D25

Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and