#cwe-798

共收录 273 条相关情报。

← 返回所有主题
漏洞预警2026-10-01 发布INFO

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before...

CVE-2026-27874

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications contain...

CVE-2026-102666

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to acce

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass...

CVE-2026-13043

A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript fil...

CVE-2026-67104

HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storag...

CVE-2026-96587

The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These cr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firm...

CVE-2026-100294

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access...

CVE-2026-7193

A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the...

CVE-2026-101052

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of

历史摘要 · 未重新核验 · NVD

安全公告2026-09-24 发布INFO

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be...

CVE-2026-79959

The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. A

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-24 发布INFO

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain...

CVE-2026-93290

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access i

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-24 发布MEDIUM

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data.

CVE-2026-93290

Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access i

来源摘录 · NVD

漏洞预警2026-09-23 发布INFO

A flaw has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects an unknown part of the file ssm_pro/src/main/resources/jdbc.properties....

CVE-2026-96548

A flaw has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects an unknown par

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented...

CVE-2026-92928

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-23 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain...

CVE-2026-17644

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or ro...

CVE-2026-92928

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data due to...

CVE-2026-17644

IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded credentials for several administr...

CVE-2026-76708

A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with diction...

CVE-2026-47116

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might...

CVE-2026-65113

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded cred

历史摘要 · 未重新核验 · NVD

安全公告2026-09-20 发布INFO

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server...

CVE-2026-86555

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plain

历史摘要 · 未重新核验 · GitHub Advisory