CWE-255 · Authentication
Credentials Management Errors
705CVEs
0exploited
2with a public check
34likely (EPSS 10%+)
SortMost likely exploited
705 CVEs with CWE-255 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2010-0219CheckApache Axis2 Default LoginApache · Axis2 · 2010-10-18 | – | 91% | 2010-10-18 |
| CVE-2017-8229CheckAmcrest IP Camera Web Management - Data ExposureAmcrest · Ipm-721s Firmware · 2019-07-03 | – | 74% | 2019-07-03 |
| CVE-2013-4786The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline pa…Intel · Intelligent Platform Management Interface · 2013-07-08 | – | 98% | 2013-07-08 |
| CVE-2009-3548The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which…Apache · Tomcat · 2009-11-12 | – | 79% | 2009-11-12 |
| CVE-2009-4189HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager rol…Hp · Operations Manager · 2009-12-03 | – | 79% | 2009-12-03 |
| CVE-2009-4188HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manage…Hp · Operations Dashboard · 2009-12-03 | – | 69% | 2009-12-03 |
| CVE-2010-4094The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute…Ibm · Rational Quality Manager · 2010-10-26 | – | 64% | 2010-10-26 |
| CVE-2012-1493F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-…F5 · Enterprise Manager · 2012-07-09 | – | 63% | 2012-07-09 |
| CVE-2013-3502monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive…Gwos · Groundwork Monitor · 2013-05-08 | – | 54% | 2013-05-08 |
| CVE-2010-0557IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.Ibm · Cognos Express · 2010-02-05 | – | 52% | 2010-02-05 |
| CVE-2012-4933The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the (1) Ge…Novell · Zenworks Asset Management · 2012-10-20 | – | 44% | 2012-10-20 |
| CVE-2009-1930The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute a…Microsoft · Windows 2000 · 2009-08-12 | – | 41% | 2009-08-12 |
| CVE-2016-7456VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access vi…Vmware · Vsphere Data Protection · 2016-12-29 | – | 33% | 2016-12-29 |
| CVE-2013-3585Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive information via vectors involving (1) dire…Samsung · Smart Viewer · 2013-08-28 | – | 24% | 2013-08-28 |
| CVE-2009-2762wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key[] array var…Wordpress · Wordpress · 2009-08-13 | – | 20% | 2009-08-13 |
| CVE-2008-3009Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) i…Microsoft · Windows Media Player · 2008-12-10 | – | 16% | 2008-12-10 |
| CVE-2007-6329Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dub…Microsoft · Office · 2007-12-13 | – | 16% | 2007-12-13 |
| CVE-2004-1366Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privilege…Oracle · Application Server · 2005-01-19 | – | 15% | 2005-01-19 |
| CVE-2004-2532Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server us…Solarwinds · Serv-U File Server · 2005-10-25 | – | 15% | 2005-10-25 |
| CVE-1999-0755Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.Microsoft · Windows Nt · 2000-01-04 | – | 15% | 2000-01-04 |
| CVE-2011-0951The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user pas…Cisco · Secure Access Control System · 2011-04-01 | – | 15% | 2011-04-01 |
| CVE-2011-0354The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account,…Cisco · Tandberg Endpoint · 2011-02-03 | – | 14% | 2011-02-03 |
| CVE-2007-5905Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1)…Adobe · Coldfusion · 2007-11-15 | – | 13% | 2007-11-15 |
| CVE-2016-0049Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not pro…Microsoft · Windows 10 · 2016-02-10 | – | 13% | 2016-02-10 |
| CVE-2015-7258ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by displaying user information in a Telnet c…Zte · Zxv10 W300 Firmware · 2017-08-24 | – | 13% | 2017-08-24 |
| CVE-2016-10401ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root def…Zyxel · Pk5001z Firmware · 2017-07-25 | – | 12% | 2017-07-25 |
| CVE-2016-6599BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010. This service contains a method that can be u…Bmc · Track-It! · 2018-01-30 | – | 12% | 2018-01-30 |
| CVE-2014-1849Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attacke…Foscam · Ip Camera Firmware · 2014-05-14 | – | 12% | 2014-05-14 |
| CVE-2014-3220F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary users via the name parameter in a request to the user's page…F5 · Big-Iq · 2014-05-05 | – | 11% | 2014-05-05 |
| CVE-2009-0919XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the "lampp" default password for the "nobody"…Apachefriends · Xampp · 2009-03-16 | – | 11% | 2009-03-16 |
| CVE-2014-8656The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a default password of (1) admin for the admin account and (2)…Compal Broadband Networks · Firmware · 2014-11-06 | – | 11% | 2014-11-06 |
| CVE-2015-7251ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote attackers to obtain administrative access v…Zte · Zxhn H108n R1a Firmware · 2015-12-30 | – | 11% | 2015-12-30 |
| CVE-2014-0683The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.…Cisco · Rv110w · 2014-03-06 | – | 11% | 2014-03-06 |
| CVE-2013-3612Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrat…Dahuasecurity · Dvr0404hd-A · 2013-09-17 | – | 10% | 2013-09-17 |
| CVE-2013-6884The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote attackers to gain privileges.Cru-Inc · Ditto Forensic Fieldstation · 2014-01-07 | – | 10% | 2014-01-07 |
| CVE-2011-0885A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it eas…Smc Networks · Smcd3g-Ccr · 2011-02-08 | – | 10% | 2011-02-08 |
| CVE-2013-4496Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remo…Samba · Samba · 2014-03-14 | – | 9.8% | 2014-03-14 |
| CVE-2015-7259ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, which allows remote authentica…Zte · Zxv10 W300 Firmware · 2017-08-24 | – | 9.5% | 2017-08-24 |
| CVE-2010-4233The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account,…Camtron · Cmnc-200 · 2010-11-16 | – | 9.4% | 2010-11-16 |
| CVE-2010-0444HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified…Hp · Operations Agent · 2010-02-09 | – | 8.6% | 2010-02-09 |
| CVE-2014-0329The TELNET service on the ZTE ZXV10 W300 router 2.1.0 has a hardcoded password ending with airocon for the admin account, which allows remote attackers to obtain administrative ac…Zte · Zxv10 W300 · 2014-02-04 | – | 8.5% | 2014-02-04 |
| CVE-2009-3710RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel, which allows remote attackers to gain privileges via port…Riorey · Rios · 2009-10-16 | – | 8.5% | 2009-10-16 |
| CVE-2010-2083Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via u…Microsoft · Dynamics Gp · 2010-05-26 | – | 8.5% | 2010-05-26 |
| CVE-2015-6524The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which a…Apache · Activemq · 2015-08-24 | – | 8.2% | 2015-08-24 |
| CVE-1999-0387A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.Microsoft · Windows 95 · 2000-07-12 | – | 7.9% | 2000-07-12 |
| CVE-2013-3615Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-forc…Dahuasecurity · Dvr0404hd-A · 2013-09-17 | – | 7.7% | 2013-09-17 |
| CVE-2014-3528Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier…Apache · Subversion · 2014-08-19 | – | 7.4% | 2014-08-19 |
| CVE-2018-6443A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected sy…Brocade Communications Systems, Inc. · Brocade Network Advisor · 2019-01-22 | – | 7.4% | 2019-01-22 |
| CVE-2008-1218Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a…Dovecot · Dovecot · 2008-03-10 | – | 7.3% | 2008-03-10 |
| CVE-2006-2481VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, whi…Vmware · Esx · 2006-07-31 | – | 7.2% | 2006-07-31 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.