CWE-798

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs.

xiaoheiFS is a self-hosted financial and operational system for cloud service businesses. In versions up to and includin

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, da

Multiple Finka programs use hard-coded Firebird database credentials (shared across all instances of this software). A m

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant exec

Open 5GS WebUI uses a hard-coded JWT signing key (change-me) whenever the environment variable JWT_SECRET_KEY is unset

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information or perform unauthorized ac

An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server wi

Leftover debug modules contain fixed credentials for internal AWS Cognito test sandboxes, risking asset exploitation.

A vulnerability was identified in MEPIS RM, an industrial software product developed by Metronik. The application contai

The PDBM application relies on a static, hard‑coded secret embedded in the PDBM.exe executable. This secret is used by

NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOA

Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A l

IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user.

Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier

Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 contains hardcoded WiFi driver credentials including a RADIUS s

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacker to obtain sensitiv

A security flaw has been discovered in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknown function of the fi

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to au

A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenant S3 bucke

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain pre

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.

Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover cre

Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded encryption key which could allow

A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an unknown function of the co

Open ISES Tickets before 3.44.2 embeds a hardcoded WhitePages reverse-phone API key in wp1.php that is committed to the

Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed to the publ

Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the public sou

Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in t

Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to impersonate a legitimate VOCALO

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could prov

Flowise before 3.1.0 (npm package flowise, versions 3.0.13 and earlier) uses a weak hardcoded default value 'Secre$t' fo

In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved

Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM) of the Indian Motorcyc

SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of th

A vulnerability has been found in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of

A flaw has been found in INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App up to 1.0.2 on Android. Affecte

A vulnerability has been found in wandb OpenUI up to 0.0.0.0/1.0. This impacts an unknown function of the file backend/o

A security flaw has been discovered in Beetel 777VR1 up to 01.00.09. This issue affects some unknown processing of the c

The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all route

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) contain hardcoded credentials for an operating s

Multiple hardcoded credentials have been identified, which are allowed to sign-in to the exos 9300 datapoint server runn

An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. Th

The program libraries (DLL) and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is t

The default password for the extended admin user mode in the application U9ExosAdmin.exe ("Kaba 9300 Administration") is

Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The

Gradio is an open-source Python package designed for quick prototyping. Starting in version 4.16.0 and prior to version