Lucene search
+L

30 matches found

Veracode
Veracode
added 2024/12/18 4:23 a.m.13 views

Use Of A Broken Or Risky Cryptographic Algorithm

github.com/beego/beego is vulnerable to Use of a Broken or Risky Cryptographic Algorithm. The vulnerability is due to the use of MD5 as a hashing algorithm, which allows two different inputs to produce the same hash value...

7.5CVSS6.7AI score0.00342EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2024/02/02 4:15 p.m.24 views

Design/Logic Flaw

Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm...

5CVSS7.2AI score0.00525EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2024/01/29 9:30 p.m.30 views

DeviceFarmer stf uses DES-ECB

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm...

9.1CVSS7.2AI score0.00376EPSS
SaveExploits0References6Affected Software1
Amazon
Amazon
added 2023/03/22 12:00 a.m.10 views

Important: golang-github-cpuguy83-md2man

Issue Overview: 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling,...

9.3CVSS8.4AI score0.0995EPSS
SaveExploits7
OSV
OSV
added 2023/01/17 9:15 p.m.23 views

AZL-13023 CVE-2021-36647 affecting package fluent-bit for versions less than 2.0.9-1

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking a...

4.7CVSS5.7AI score0.00164EPSS
SaveExploits0References1
GitLab Advisory Database
GitLab Advisory Database
added 2021/09/06 12:00 a.m.38 views

Use of a Broken or Risky Cryptographic Algorithm

The ElGamal implementation in Botan, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's...

5.9CVSS2.3AI score0.01532EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2020/09/17 5:15 p.m.28 views

CVE-2020-25728

The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm involving an increment that allows a malicious user to change any user's account password include the admin account...

8.8CVSS0.01001EPSS
SaveExploits1References1
OSV
OSV
added 2020/09/17 5:15 p.m.25 views

CVE-2020-25728

The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm involving an increment that allows a malicious user to change any user's account password include the admin account...

8.8CVSS7AI score
SaveExploits0References1
Prion
Prion
added 2020/09/17 5:15 p.m.18 views

Default credentials

The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm involving an increment that allows a malicious user to change any user's account password include the admin account...

6.5CVSS8.7AI score0.01001EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/09/17 4:34 p.m.27 views

CVE-2020-25728

The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm involving an increment that allows a malicious user to change any user's account password include the admin account...

8.8AI score0.01001EPSS
SaveExploits1References1
Rows per page
Query Builder