Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.1When the default self-signed certificate is used, an attacker could gain administrative access to the application.EPSS 0.2%Oct 14, 2026
- High7.0SeaweedFS is a distributed storage system for files and blobs.EPSS 0.4%Oct 14, 2026
- Critical9.3vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil.EPSS 1.0%Oct 14, 2026
- Medium6.9An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.EPSS 0.1%Oct 14, 2026
- Medium5.3A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox ClouEPSS 0.2%Oct 13, 2026
- High8.6Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy.EPSS 0.2%Oct 13, 2026
- Medium4.0In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior tog…Oct 12, 2026
- Medium6.9A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206.EPSS 0.3%Oct 12, 2026
- Critical9.3BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key…EPSS 0.5%Oct 11, 2026
- High8.6A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments…EPSS 0.2%Oct 8, 2026
- Critical9.1Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- Low2.9A security flaw has been discovered in perfree go-fastdfs-web up to 1.3.7.Mar 11, 2026
- Critical9.8IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using th…Mar 3, 2026
- High8.2An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools.Mar 3, 2026
- High7.8Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying attention), the firmw…Feb 27, 2026
- High8.7Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript.Feb 24, 2026
- Critical9.3Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to ge…EPSS 0.5%Dec 22, 2025
- Critical9.8Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key VulnerabilityKEVEPSS 94.3%Apr 3, 2025
- Critical9.8Apache Shiro Code Execution VulnerabilityKEVEPSS 93.0%Jun 7, 2016
19 records · page 1 of 1
PreviousNext