https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:33:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-197135 EUVD-2026-197135 https://cve.radiocsirt.org/vuln/euvd-2026-197135 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5764 <p>Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an alternate encryption passphrase, it could only be done at first boot and not updated.</p> <p>This issue affects Nexus Repository: from 3.0.0 through 3.72.0.</p> <p>Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an alternate encryption passphrase, it could only be done at first boot and not updated.</p> <p>This issue affects Nexus Repository: from 3.0.0 through 3.72.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-5764 https://cve.radiocsirt.org/vuln/ghsa-5362-r6fh-h45f <p>Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an alternate encryption passphrase, it could only be done at first boot and not updated.</p> <p>This issue affects Nexus Repository: from 3.0.0 through 3.72.0.</p> <p>Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an alternate encryption passphrase, it could only be done at first boot and not updated.</p> <p>This issue affects Nexus Repository: from 3.0.0 through 3.72.0.</p> https://cve.radiocsirt.org/vuln/ghsa-5362-r6fh-h45f https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2864 <p>Ein Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Informationen offenzulegen und Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Informationen offenzulegen und Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2864