CWE-260 · 23 kayıt

Password in Configuration File

Bu sınıftaki CVE’ler

23 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
54Planlayın	CVE-2017-7925Kavram kanıtı	A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-Idahuasecurity · dh-ipc-hdbw23a0rn-zs firmware · CWE-260 Kimlik doğrulamasız	Kritik9,8	—	%51,4	5 May 2017
39İzleyin	CVE-2016-7043İstismar yok	It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properredhat · kie-server · CWE-260 Kimlik doğrulamasız	Kritik9,8	—	%1,5	15 May 2019
39İzleyin	CVE-2023-34128İstismar yok	Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file.sonicwall · analytics · CWE-260 Kimlik doğrulamasız	Kritik9,8	—	%0,7	12 Tem 2023
39İzleyin	CVE-2023-53739İstismar yok	Tinycontrol LAN Controller v3 LK3 1.58a Unauthenticated Configuration Backup Disclosuretinycontrol · tinycontrol lan controller v · CWE-260 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,9	—	%0,6	9 Ara 2025
39İzleyin	CVE-2025-57754İstismar yok	eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)kristoferfannar · eslint-ban-moment · CWE-260 Kimlik doğrulamasız	Kritik9,8	—	%0,4	21 Ağu 2025
37İzleyin	CVE-2025-6513İstismar yok	BRAIN2 Configuration file for database access not sufficiently securedbizerba se & co. kg · brain2 · CWE-260	Kritik9,3	—	%0,2	23 Haz 2025
36İzleyin	CVE-2017-7923İstismar yok	A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xhikvision · ds-2cd2032-i firmware · CWE-260	Yüksek8,8	—	%2,4	5 May 2017
35İzleyin	CVE-2019-3780İstismar yok	Cloud Foundry Container Runtime Leaks IAAS Credentialscloudfoundry · container runtime · CWE-260	Yüksek8,8	—	%1,4	8 Mar 2019
35İzleyin	CVE-2025-25022İstismar yok	IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosureibm · cloud pak for security · CWE-260 Kimlik doğrulamasız	Yüksek8,8	—	%0,3	3 Haz 2025
34İzleyin	CVE-2023-53770İstismar yok	MiniDVBLinux 5.4 Unauthenticated Configuration Download via Backup Endpointminidvblinux · minidvblinux · CWE-260 Kimlik doğrulamasız	Yüksek8,7	—	%0,5	9 Ara 2025
34İzleyin	CVE-2019-25465İstismar yok	Hisilicon HiIpcam V100R003 Information Disclosure via Directory Traversalhisilicon · hiipcam · CWE-260 Kimlik doğrulamasız Yol geçişi	Yüksek8,7	—	%0,5	11 Mar 2026
34İzleyin	CVE-2025-32111İstismar yok	The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for acme.sh project · acme.sh · CWE-260 Kimlik doğrulamasız	Yüksek8,7	—	%0,4	4 Nis 2025
31İzleyin	CVE-2021-35033İstismar yok	A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password managemzyxel · nbg6818 firmware · CWE-260	Yüksek7,8	—	%0,4	23 Kas 2021
30İzleyin	CVE-2025-33093İstismar yok	IBM Sterling Partner Engagement Manager information disclosureibm · sterling partner engagement manager · CWE-260 Kimlik doğrulamasız	Yüksek7,5	—	%0,4	7 May 2025
26İzleyin	CVE-2025-33119İstismar yok	IBM QRadar SIEM Information Disclosureibm · qradar security information and event manager · CWE-260	Orta6,5	—	%0,2	12 Kas 2025
22İzleyin	CVE-2020-5721İstismar yok	MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field mikrotik · winbox · CWE-260	Orta5,5	—	%0,4	15 Nis 2020
22İzleyin	CVE-2023-2790İstismar yok	TOTOLINK N200RE Telnet Service custom.conf password in configuration filetotolink · n200re firmware · CWE-260	Orta5,5	—	%0,3	18 May 2023
22İzleyin	CVE-2025-36002İstismar yok	IBM Sterling B2B Integrator information disclosureibm · sterling b2b integrator · CWE-260	Orta5,5	—	%0,2	16 Eki 2025
22İzleyin	CVE-2024-45673İstismar yok	IBM Security Verify Bridge information disclosureibm · security verify bridge directory sync · CWE-260	Orta5,5	—	%0,1	21 Şub 2025
22İzleyin	CVE-2025-36100İstismar yok	IBM MQ information disclosureibm · mq · CWE-260	Orta5,5	—	%0,1	6 Eyl 2025
21İzleyin	CVE-2025-51540İstismar yok	EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)).CWE-260 Kimlik doğrulamasız	Orta5,3	—	%0,2	19 Ağu 2025
17İzleyin	CVE-2024-49817İstismar yok	IBM Security Guardium Key Lifecycle Manager information disclosureibm · security guardium key lifecycle manager · CWE-260 Yerel yetki yükseltme	Orta4,4	—	%0,2	17 Ara 2024
8İzleyin	CVE-2014-5400İstismar yok	Hospira MedNet Password in Configuration Filehospira · mednet · CWE-260	Düşük2,1	—	%0,3	3 Nis 2015

CVE-2017-7925
54Planlayın
A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-I
KritikCVSS 9,8Kavram kanıtıEPSS %51
- Kimlik doğrulamasız
dahuasecurity · dh-ipc-hdbw23a0rn-zs firmware5 May 2017
CVE-2016-7043
39İzleyin
It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java proper
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
redhat · kie-server15 May 2019
CVE-2023-34128
39İzleyin
Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
sonicwall · analytics12 Tem 2023
CVE-2023-53739
39İzleyin
Tinycontrol LAN Controller v3 LK3 1.58a Unauthenticated Configuration Backup Disclosure
KritikCVSS 9,9İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
tinycontrol · tinycontrol lan controller v9 Ara 2025
CVE-2025-57754
39İzleyin
eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
kristoferfannar · eslint-ban-moment21 Ağu 2025
CVE-2025-6513
37İzleyin
BRAIN2 Configuration file for database access not sufficiently secured
KritikCVSS 9,3İstismar yokEPSS %0
bizerba se & co. kg · brain223 Haz 2025
CVE-2017-7923
36İzleyin
A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2x
YüksekCVSS 8,8İstismar yokEPSS %2
hikvision · ds-2cd2032-i firmware5 May 2017
CVE-2019-3780
35İzleyin
Cloud Foundry Container Runtime Leaks IAAS Credentials
YüksekCVSS 8,8İstismar yokEPSS %1
cloudfoundry · container runtime8 Mar 2019
CVE-2025-25022
35İzleyin
IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
ibm · cloud pak for security3 Haz 2025
CVE-2023-53770
34İzleyin
MiniDVBLinux 5.4 Unauthenticated Configuration Download via Backup Endpoint
YüksekCVSS 8,7İstismar yokEPSS %1
- Kimlik doğrulamasız
minidvblinux · minidvblinux9 Ara 2025
CVE-2019-25465
34İzleyin
Hisilicon HiIpcam V100R003 Information Disclosure via Directory Traversal
YüksekCVSS 8,7İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
hisilicon · hiipcam11 Mar 2026
CVE-2025-32111
34İzleyin
The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
acme.sh project · acme.sh4 Nis 2025
CVE-2021-35033
31İzleyin
A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password managem
YüksekCVSS 7,8İstismar yokEPSS %0
zyxel · nbg6818 firmware23 Kas 2021
CVE-2025-33093
30İzleyin
IBM Sterling Partner Engagement Manager information disclosure
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
ibm · sterling partner engagement manager7 May 2025
CVE-2025-33119
26İzleyin
IBM QRadar SIEM Information Disclosure
OrtaCVSS 6,5İstismar yokEPSS %0
ibm · qradar security information and event manager12 Kas 2025
CVE-2020-5721
22İzleyin
MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field
OrtaCVSS 5,5İstismar yokEPSS %0
mikrotik · winbox15 Nis 2020
CVE-2023-2790
22İzleyin
TOTOLINK N200RE Telnet Service custom.conf password in configuration file
OrtaCVSS 5,5İstismar yokEPSS %0
totolink · n200re firmware18 May 2023
CVE-2025-36002
22İzleyin
IBM Sterling B2B Integrator information disclosure
OrtaCVSS 5,5İstismar yokEPSS %0
ibm · sterling b2b integrator16 Eki 2025
CVE-2024-45673
22İzleyin
IBM Security Verify Bridge information disclosure
OrtaCVSS 5,5İstismar yokEPSS %0
ibm · security verify bridge directory sync21 Şub 2025
CVE-2025-36100
22İzleyin
IBM MQ information disclosure
OrtaCVSS 5,5İstismar yokEPSS %0
ibm · mq6 Eyl 2025
CVE-2025-51540
21İzleyin
EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)).
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
19 Ağu 2025
CVE-2024-49817
17İzleyin
IBM Security Guardium Key Lifecycle Manager information disclosure
OrtaCVSS 4,4İstismar yokEPSS %0
- Yerel yetki yükseltme
ibm · security guardium key lifecycle manager17 Ara 2024
CVE-2014-5400
8İzleyin
Hospira MedNet Password in Configuration File
DüşükCVSS 2,1İstismar yokEPSS %0
hospira · mednet3 Nis 2015

Tüm zafiyet sınıfları