Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090.Oct 15, 2026
- High7.5IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing…May 26, 2026
- Critical9.3Tyler Identity Local (TID-L) uses documented, default administrative credentials.May 19, 2026
- Critical9.2Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have created clusters with an insecure default password…May 12, 2026
- Critical9.8Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes.May 8, 2026
- Critical9.8netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value f…Mar 11, 2026
- High8.7Istio is an open platform to connect, manage, and secure microservices.Mar 10, 2026
- High7.1Default credentials set for local privileged user in Virtual Appliance.Mar 6, 2026
- Critical9.8OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication.Mar 3, 2026
- Critical9.3SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to obtain administrative access to…Feb 27, 2026
- Critical9.3Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation…Feb 24, 2026
11 records · page 1 of 1
PreviousNext