VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

403,990 vulnerabilities · 1,768 actively exploited (CISA KEV)

identicard ✕Clear filters

5 results

ID	Severity	Summary	Published
CVE-2019-3909	CRITICAL9.8	Premisys Identicard version 3.1.190 database uses default credentials. Users are unable to change the credentials without vendor intervention.	18/01/2019
CVE-2019-3908	HIGH7.5	Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded and unchangeable. An attacker with access to these backups can decrypt them and obtain sensitive data.	18/01/2019
CVE-2019-3907	HIGH7.5	Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).	18/01/2019
CVE-2019-3906	HIGH8.8