Vulnerabilities > Use of Hard-coded Credentials

DATE CVE VULNERABILITY TITLE RISK
2024-12-03 CVE-2024-41777 Use of Hard-coded Credentials vulnerability in IBM Cognos Controller 11.0.0/11.0.1
IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
network
low complexity
ibm CWE-798
7.5
2024-11-29 CVE-2024-49805 IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
network
low complexity
CWE-798
critical
9.4
2024-11-29 CVE-2024-49806 IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
network
low complexity
CWE-798
critical
9.4
2024-11-15 CVE-2024-49060 Azure Stack HCI Elevation of Privilege Vulnerability
local
low complexity
CWE-798
8.8
2024-11-13 CVE-2024-7295 Use of Hard-coded Credentials vulnerability in Progress Telerik Report Server
In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.
local
low complexity
progress CWE-798
6.2
2024-11-08 CVE-2024-11026 Use of Hard-coded Credentials vulnerability in Free-Now Freenow 12.10.0
A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android.
network
high complexity
free-now CWE-798
7.4
2024-11-06 CVE-2024-10920 Use of Hard-coded Credentials vulnerability in Mariazevedo88 Travels-Java-Api
A vulnerability was found in mariazevedo88 travels-java-api up to 5.0.1 and classified as problematic.
network
high complexity
mariazevedo88 CWE-798
3.7
2024-11-04 CVE-2024-10748 Use of Hard-coded Credentials vulnerability in Cosmote What'S UP 4.47.3
A vulnerability, which was classified as problematic, has been found in Cosmote Greece What's Up App 4.47.3 on Android.
local
high complexity
cosmote CWE-798
4.7
2024-11-01 CVE-2024-51431 Use of Hard-coded Credentials vulnerability in Lb-Link Bl-Wr1300H Firmware 1.0.4
LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.
network
low complexity
lb-link CWE-798
critical
9.8
2024-10-30 CVE-2024-28875 Use of Hard-coded Credentials vulnerability in Level1 Wbr-6012 Firmware R0.40E6
A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the first 30 seconds post-boot.
network
high complexity
level1 CWE-798
8.1