#cwe-321

共收录 134 条相关情报。

← 返回所有主题
漏洞预警2026-08-11 发布INFO

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to...

CVE-2026-34635

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allo...

CVE-2026-57262

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high ...

CVE-2026-66763

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects usi

历史摘要 · 未重新核验 · NVD

安全公告2026-08-11 发布INFO

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware...

CVE-2025-30239

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive co

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-10 发布INFO

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to ...

CVE-2025-30239

In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in various files using o...

CVE-2026-54218

Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the d...

CVE-2026-49008

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.

CVE-2026-49006

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmiss

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-05 发布INFO

The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth ...

CVE-2026-18411

The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication k

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard...

CVE-2025-15627

A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard-coded cryptographic keys to

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges bet...

CVE-2025-15627

A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard-coded cryptographic keys to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-30 发布INFO

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS...

CVE-2026-5846

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 cert

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-27 发布INFO

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encryption key to encrypt secrets in the MySQL databases. (This ...

CVE-2021-32086

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encrypt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-22 发布INFO

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion of image...

CVE-2026-14932

In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vuln

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-22 发布INFO

In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity...

CVE-2026-13184

In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret d...

CVE-2026-47410

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an ins

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and ships it as the default in .env.example. ...

CVE-2026-62241

clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me')

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

clawvet < 0.7.5 Hard-coded JWT Secret Session Forgery

CVE-2026-62241

clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me')

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-15 发布INFO

Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read...

CVE-2026-9770

Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is s

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-15 发布INFO

Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is shared across devices.  An attacker with access to the fir...

CVE-2026-9770

Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is s

历史摘要 · 未重新核验 · NVD