Lucene search
+L

6613 matches found

OSV
OSV
•added 2021/12/15 6:15 p.m.•22 views

CVE-2021-42216

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.8CVSS6.9AI score
SaveExploits0References2
Prion
Prion
•added 2021/12/15 6:15 p.m.•20 views

Design/Logic Flaw

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

7.5CVSS9.3AI score0.01208EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2021/12/15 5:53 p.m.•2 views

CVE-2021-42216

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.8CVSS0.01208EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/12/15 5:53 p.m.•36 views

CVE-2021-42216

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.6AI score0.01208EPSS
SaveExploits1References2
CVE
CVE
•added 2021/12/15 5:53 p.m.•58 views

CVE-2021-42216

The CVE-2021-42216 entry concerns AnonAddy 0.8.5 with a broken or risky cryptographic algorithm in VerificationController.php. Affected software: AnonAddy (version 0.8.5). Vulnerable component: VerificationController.php; root cause: use of a broken or risky cryptographic algorithm. Impact (per C...

9.8CVSS9.4AI score0.01208EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•4 views

CVE-2021-42216: Inadequate Encryption Strength

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php...

9.8CVSS5.7AI score0.01208EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2021/12/15 12:00 a.m.•9 views

AnonAddy 加密问题漏洞

AnonAddy is an anonymous email forwarding system from AnonAddy, Inc. A security vulnerability exists in AnonAddy that stems from the presence of a corrupt or risky encryption algorithm in VerificationController.php in AnonAddy...

9.8CVSS8.3AI score0.01208EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•10 views

PT-2021-23559 · Anonaddy · Anonaddy

Name of the Vulnerable Software and Affected Versions: AnonAddy version 0.8.5 Description: A Broken or Risky Cryptographic Algorithm exists in the software via VerificationController.php. Recommendations: For AnonAddy version 0.8.5, consider updating to a newer version that addresses the issue wi...

9.8CVSS9.3AI score0.01208EPSS
SaveExploits1References6
CNVD
CNVD
•added 2021/12/14 12:00 a.m.•52 views

IBM Spectrum Copy Data Management Encryption Issue Vulnerability

IBM Spectrum Copy Data Management, an IBM company that modernizes, simplifies and automates data center copy management processes, is vulnerable to an encryption issue that stems from the fact that IBM Spectrum Copy Data Management uses a weaker-than-expected encryption algorithm, which could be...

7.5CVSS2.4AI score0.00687EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/12 12:00 a.m.•40 views

IBM DB2 Information Disclosure Vulnerability (CNVD-2021-99669)

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. An information disclosure vulnerability exists in IBM DB2 for Linux, UNIX, and Windows, which stems fr...

7.5CVSS7.4AI score0.00919EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/09 12:00 a.m.•5 views

CVE-2021-39002: Use of a Broken or Risky Cryptographic Algorithm

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

7.5CVSS7.1AI score0.00919EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2021/12/07 3:47 p.m.•14 views

nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

A remote code execution flaw was found in the way NSS verifies certificates. This flaw allows an attacker posing as an SSL/TLS server to trigger this issue in a client application compiled with NSS when it tries to initiate an SSL/TLS connection. Similarly, a server application compiled with NSS,...

9.8CVSS7.7AI score0.17563EPSS
SaveExploits0References7
Fortinet
Fortinet
•added 2021/12/07 12:00 a.m.•54 views

FortiAuthenticator - "Mandatory password and OTP" setting not enforcing OTP on unimported remote users

An incorrect implementation of authentication algorithm vulnerability CWE-303 in FortiAuthenticator may allow an user whose LDAP account is unimported to bypass the second factor of authentication via a RADIUS login portal...

5.5CVSS7.9AI score0.00584EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2021/12/01 4:00 p.m.•47 views

UBUNTU-CVE-2021-43527

NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \7, or PKCS \12 are likely to be impacted. Applications using N...

9.8CVSS7.4AI score0.17563EPSS
SaveExploits0References6
CNVD
CNVD
•added 2021/12/01 12:00 a.m.•63 views

IBM QRadar SIEM Encryption Issue Vulnerability

IBM QRadar SIEM is a U.S.-based solution from IBM that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture and generates detailed reports on data access and user activity. IBM QRadar ha...

7.5CVSS1.5AI score0.00687EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/11/24 12:00 a.m.•105 views

Huawei Data Communication: Weak Secure Algorithm Vulnerability in Huawei Product (huawei-sa-20210512-01-infomationleak)

There is a weak secure algorithm vulnerability in Huawei products. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

5.9CVSS5.9AI score0.00417EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/11/23 4:15 p.m.•10 views

CVE-2021-22356

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions...

5.9CVSS6.2AI score0.00417EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/23 4:15 p.m.•17 views

CVE-2021-22356

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions...

5.9CVSS6.2AI score0.00417EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/23 4:15 p.m.•57 views

CVE-2021-22356

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions...

5.9CVSS0.00417EPSS
SaveExploits0References1
Prion
Prion
•added 2021/11/23 4:15 p.m.•34 views

Code injection

There is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is used in a module. Attackers can exploit this vulnerability by capturing and analyzing the messages between devices to obtain information. This can lead to information leak.Affected product versions...

4.3CVSS5.5AI score0.00417EPSS
SaveExploits0References1Affected Software6
Rows per page
Query Builder