#cwe-321

共收录 134 条相关情报。

漏洞预警2026-10-13 发布INFO

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox C...

CVE-2026-106172

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 thr

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-10-13 发布INFO

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) ...

CVE-2026-65198

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker wh

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-10-13 发布INFO

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() acce...

CVE-2026-53709

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example s

历史摘要 · 未重新核验 · NVD

#cve #cwe-287 #cwe-321 #cwe-798 #cwe-1188

安全公告2026-10-13 发布INFO

MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery

CVE-2026-53709

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example s

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1188 #cwe-287 #cwe-321 #cwe-798

漏洞预警2026-10-12 发布INFO

NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies a...

CVE-2026-109424

NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vul

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-10-12 发布INFO

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could allow an unauthenti...

CVE-2026-85963

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector fun

历史摘要 · 未重新核验 · NVD

#cve #cwe-321 #cwe-918

漏洞预警2026-10-12 发布INFO

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with...

CVE-2026-93694

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to

历史摘要 · 未重新核验 · NVD

#cve #cwe-321 #cwe-362 #cwe-918

漏洞预警2026-10-12 发布INFO

A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptographic ke...

CVE-2026-108798

A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The m

历史摘要 · 未重新核验 · NVD

#cve #cwe-320 #cwe-321

安全公告2026-10-11 发布INFO

BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows...

CVE-2026-108860

BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to f

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-321 #severity:critical

漏洞预警2026-10-11 发布INFO

BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebSta...

CVE-2026-108860

BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to f

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-10-06 发布INFO

Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could poten...

CVE-2026-103778

Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability.

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-10-06 发布INFO

This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could ...

CVE-2026-85153

This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the clie

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-10-05 发布INFO

A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the component...

CVE-2026-105392

A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of

历史摘要 · 未重新核验 · NVD

#cve #cwe-320 #cwe-321

安全公告2026-10-03 发布INFO

Armatura One stores database and message-broker credentials in an install configuration file,...

CVE-2026-94591

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-1

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-321 #severity:high

漏洞预警2026-10-02 发布INFO

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption ke...

CVE-2026-94591

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-1

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

安全公告2026-10-02 发布INFO

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows :...

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-321 #severity:critical

漏洞预警2026-10-01 发布INFO

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63.

CVE-2026-71449

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

漏洞预警2026-10-01 发布INFO

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate un...

CVE-2026-82827

Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of

历史摘要 · 未重新核验 · NVD

#cve #cwe-321

安全公告2026-09-30 发布INFO

AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime...

CVE-2026-103055

AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE serv

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-321 #severity:high

漏洞预警2026-09-30 发布INFO

AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET environment variab...

CVE-2026-103055

AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE serv

历史摘要 · 未重新核验 · NVD

#cve #cwe-321