Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.0SeaweedFS is a distributed storage system for files and blobs.Oct 14, 2026
- Critical9.3vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil.Oct 14, 2026
- Medium6.9An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.Oct 14, 2026
- Medium5.3A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, Fort…Oct 13, 2026
- Medium6.9A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206.Oct 12, 2026
- Critical9.3BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key…Oct 11, 2026
- High8.6A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments…Oct 8, 2026
- Critical9.1Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz.May 19, 2026
- Critical9.3Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to ge…Dec 22, 2025
- Critical9.8Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key VulnerabilityKEVEPSS 94.3%Apr 3, 2025
- Critical9.8Apache Shiro Code Execution VulnerabilityKEVEPSS 93.0%Jun 7, 2016
11 records · page 1 of 1
PreviousNext