Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
7 matching records.
-
An API key is hardcoded and retrievable from the GV-Face package.
An API key is hardcoded and retrievable from the GV-Face package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to…
-
GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections.
GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connections. The HTTP traffic is not encrypted, an attacker with the ability to intercept network traffic.
-
The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Cloud application package.
The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Cloud application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic…
-
An API key is hardcoded and retrievable from the GV-Cloud application package.
An API key is hardcoded and retrievable from the GV-Cloud application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized…
-
The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Access application package.
The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Access application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic…
-
An API key is hardcoded and retrievable from the GV-Access package.
An API key is hardcoded and retrievable from the GV-Access package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to…
-
The RSA cryptographic key material, including a private key and public key, is embedded within the application package.
The RSA cryptographic key material, including a private key and public key, is embedded within the application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic keys…
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=GeoVision+Inc.&limit=100. RSS for this section: feed.xml.