Lucene search
+L

5491 matches found

securityvulns
securityvulns
added 2010/08/05 12:0 a.m.30 views

VxWorks weak wuthentication

Weak password hashing algorythm with large collision probability...

1.2AI score
SaveExploits0References1
CERT
CERT
added 2010/08/02 12:0 a.m.54 views

Wind River Systems VxWorks weak default hashing algorithm in standard authentication API (loginLib)

Overview The hashing algorithm that is used in the standard authentication API for VxWorks is susceptible to collisions. An attacker can brute force a password by guessing a string that produces the same hash as a legitimate password. Description An attacker with a known username and access to a...

7.8CVSS6.7AI score0.01716EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2010/07/12 12:0 a.m.39 views

Google Chrome multiple vulnerabilities - July 10

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - July 10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

9.3CVSS0.8AI score0.0211EPSS
SaveExploits5References1
ThreatPost
ThreatPost
added 2010/07/09 2:12 p.m.12 views

Skype's Encryption Algorithm Exposed

A group of code breakers believe they have successfully reverse engineered Skype’s implementation of the RC4 cipher, one of several encryption technologies used by the consumer-oriented VoIP service. Read the full article. The Register...

2.6AI score
SaveExploits0References2
seebug.org
seebug.org
added 2010/07/08 12:0 a.m.45 views

Google Chrome 5.0.375.99更新修复多个安全漏洞

BUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞,用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1 在使用WebGL时Chrome中可能出现越界读访问错误。 2 Chrome没有正确地隔离沙盒中的IFRAME元素。 3...

9.3CVSS0.2AI score0.0211EPSS
SaveExploits5
NVD
NVD
added 2010/07/06 5:17 p.m.24 views

CVE-2010-2648

The implementation of the Unicode Bidirectional Algorithm aka Bidi algorithm or UBA in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

9.3CVSS8.9AI score0.02046EPSS
SaveExploits1References9
Prion
Prion
added 2010/07/06 5:17 p.m.19 views

Memory corruption

The implementation of the Unicode Bidirectional Algorithm aka Bidi algorithm or UBA in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

9.3CVSS7.5AI score0.02046EPSS
SaveExploits1References9Affected Software3
UbuntuCve
UbuntuCve
added 2010/07/06 5:17 p.m.31 views

CVE-2010-2648

The implementation of the Unicode Bidirectional Algorithm aka Bidi algorithm or UBA in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

9.3CVSS5.9AI score0.02046EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2010/07/06 5:0 p.m.42 views

CVE-2010-2648

The implementation of the Unicode Bidirectional Algorithm aka Bidi algorithm or UBA in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

8.8AI score0.02046EPSS
SaveExploits1References9
CVE
CVE
added 2010/07/06 5:0 p.m.69 views

CVE-2010-2648

CVE-2010-2648 : In Google Chrome, the Unicode Bidirectional Algorithm (UBA) implementation prior to 5.0.375.99 is vulnerable to memory corruption that can lead to a denial of service or potentially other impact via unknown vectors. The description confirms the affected product/version and the und...

9.3CVSS8.9AI score0.02046EPSS
SaveExploits1References9Affected Software1
Debian CVE
Debian CVE
added 2010/07/06 5:0 p.m.28 views

CVE-2010-2648

Removed by vendor...

9.3CVSS6.6AI score0.02046EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2010/07/06 12:0 a.m.33 views

Debian Security Advisory DSA 2054-2 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 2054-2. OpenVAS Vulnerability Test $Id: deb20542.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2054-2 bind9 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

7.6CVSS1AI score0.09363EPSS
SaveExploits0
NVD
NVD
added 2010/06/25 9:30 p.m.27 views

CVE-2010-2468

The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a weak hash algorithm for storing the Administrator password, which makes it easier for context-dependent attackers to obtain privileged access by recovering the cleartext of this password...

10CVSS6.3AI score0.01691EPSS
SaveExploits1References5
Prion
Prion
added 2010/06/25 9:30 p.m.25 views

Default credentials

The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a weak hash algorithm for storing the Administrator password, which makes it easier for context-dependent attackers to obtain privileged access by recovering the cleartext of this password...

10CVSS6.8AI score0.01691EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2010/06/25 9:0 p.m.62 views

CVE-2010-2468

CVE-2010-2468 affects S2 Security NetBox 2.x and 3.x as used in Linear eMerge 50/5000 and Sonitrol eAccess. The root cause is the use of a weak hash algorithm for storing the Administrator password, which can allow context-dependent attackers to recover the password and gain privileged access. Th...

10CVSS6.5AI score0.01691EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2010/06/25 9:0 p.m.30 views

CVE-2010-2468

The S2 Security NetBox 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, uses a weak hash algorithm for storing the Administrator password, which makes it easier for context-dependent attackers to obtain privileged access by recovering the cleartext of this password...

6.3AI score0.01691EPSS
SaveExploits1References5
exploitpack
exploitpack
added 2010/06/24 12:0 a.m.15 views

NO-IP.com Dynamic DNS Update Client 2.2.1 - Request Insecure Encoding Algorithm

NO-IP.com Dynamic DNS Update Client 2.2.1 - Request Insecure Encoding Algorithm !/usr/bin/python """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// //...

0.4AI score
SaveExploits0
zdt
zdt
added 2010/06/24 12:0 a.m.33 views

Dynamic DNS Update Client v2.2.1 "Request" Insecure Encoding Algorithm

Exploit for windows platform in category local exploits ====================================================================== Dynamic DNS Update Client v2.2.1 "Request" Insecure Encoding Algorithm ====================================================================== !/usr/bin/python """...

6.8AI score
SaveExploits0
NVD
NVD
added 2010/05/24 7:30 p.m.22 views

CVE-2006-7239

The gnutlsx509oid2macalgorithm function in lib/gnutlsalgorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service crash via a crafted X.509 certificate that uses a hash algorithm that is not supported by GnuTLS, which triggers a NULL pointer dereference...

5CVSS6.4AI score0.01545EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2010/05/24 12:0 a.m.8 views

PT-2010-1227 · Gnu · Gnutls

Name of the Vulnerable Software and Affected Versions: GnuTLS versions prior to 1.4.2 Description: The issue allows remote attackers to cause a denial of service crash via a crafted X.509 certificate that uses a hash algorithm not supported by GnuTLS, triggering a NULL pointer dereference in the...

5CVSS6.3AI score0.01545EPSS
SaveExploits0References4
Rows per page
Query Builder