Lucene search
+L

274 matches found

Vulnrichment
Vulnrichment
•added 2023/06/06 7:38 a.m.•31 views

CVE-2022-22076 Cryptographic issue in Core

information disclosure due to cryptographic issue in Core during RPMB read request...

7.1CVSS6.7AI score0.00113EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/06/06 7:38 a.m.•47 views

CVE-2022-22076 Cryptographic issue in Core

information disclosure due to cryptographic issue in Core during RPMB read request...

7.1CVSS6.8AI score0.00113EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/06 7:38 a.m.•93 views

CVE-2022-22076

CVE-2022-22076 describes information disclosure caused by a cryptographic issue in the Core during RPMB read requests. Public sources in the provided documents (NVD, Red Hat Security Advisory, and other aggregations) state this cryptographic flaw leads to information leakage in Qualcomm-related c...

7.1CVSS5.8AI score0.00113EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/06/06 12:00 a.m.•14 views

PT-2023-12679 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to an information disclosure due to a cryptographic problem in Core during RPMB read requests. Recommendations: At the moment, there is no information about a newer versio...

7.1CVSS6.6AI score0.00113EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/06 12:00 a.m.•0 views

CVE-2022-22076: Undefined Security Weakness

information disclosure due to cryptographic issue in Core during RPMB read request...

7.1CVSS5.7AI score0.00113EPSS
SaveExploits0References2
CNVD
CNVD
•added 2023/06/01 12:00 a.m.•55 views

IBM Global Security Kit Encryption Issues Vulnerability

IBM Global Security Kit is a library and utility program for SSL or TLS communications from International Business Machines IBM. The IBM Global Security Kit suffers from a cryptographic issue vulnerability that stems from a time-based side-channel in the RSA decryption implementation, which could...

7.5CVSS6.2AI score0.00925EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/05/11 12:00 a.m.•50 views

Dell EMC ECS Encryption Issue Vulnerability

The Dell EMC ECS is a storage device from Dell USA. A cryptographic issue vulnerability exists in Dell EMC ECS versions prior to 3.8.0.2, which stems from incorrect validation of cryptographic signatures. An attacker exploiting this vulnerability could modify the subject data of a request...

7.5CVSS6.3AI score0.00268EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2023/04/14 2:15 p.m.•76 views

CVE-2022-45170

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/file endpoint. A malicious user, logged into a victim's account, is able to decipher a file without knowing the key set by the user...

6.5CVSS6.5AI score0.00444EPSS
SaveExploits1References1
OSV
OSV
•added 2023/04/14 2:15 p.m.•15 views

CVE-2022-45170

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/file endpoint. A malicious user, logged into a victim's account, is able to decipher a file without knowing the key set by the user...

6.5CVSS5.8AI score0.00444EPSS
SaveExploits1References1
NVD
NVD
•added 2023/04/14 2:15 p.m.•28 views

CVE-2022-45170

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/file endpoint. A malicious user, logged into a victim's account, is able to decipher a file without knowing the key set by the user...

6.5CVSS6.4AI score0.00444EPSS
SaveExploits1References1
Prion
Prion
•added 2023/04/14 2:15 p.m.•24 views

Design/Logic Flaw

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/file endpoint. A malicious user, logged into a victim's account, is able to decipher a file without knowing the key set by the user...

4CVSS6.3AI score0.00444EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/04/14 12:00 a.m.•44 views

CVE-2022-45170

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/file endpoint. A malicious user, logged into a victim's account, is able to decipher a file without knowing the key set by the user...

6.5AI score0.00444EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/04/14 12:00 a.m.•12 views

CVE-2022-45170

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/file endpoint. A malicious user, logged into a victim's account, is able to decipher a file without knowing the key set by the user...

6.8AI score0.00444EPSS
SaveExploits1References1
CVE
CVE
•added 2023/04/14 12:00 a.m.•74 views

CVE-2022-45170

CVE-2022-45170 affects LIVEBOX Collaboration vDesk (pre-v018) via the endpoint /api/v1/vencrypt/decrypt/file. A malicious user, already logged into a victim’s account, can decipher a file without the user’s key, revealing a cryptographic issue impacting confidentiality. The current sources descri...

6.5CVSS6.3AI score0.00444EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/14 12:00 a.m.•1 views

CVE-2022-45170: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/file endpoint. A malicious user, logged into a victim's account, is able to decipher a file without knowing the key set by the user...

6.5CVSS5.8AI score0.00444EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/04/14 12:00 a.m.•15 views

LIVEBOX Collaboration vDesk 加密问题漏洞

LIVEBOX Collaboration vDesk is an application from LIVEBOX, Inc. A security vulnerability exists in LIVEBOX Collaboration vDesk version v018 and prior versions, which stems from /api/v1/vencrypt/decrypt/file A cryptographic issue may occur...

6.5CVSS6.4AI score0.00444EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/03/10 4:02 a.m.•9 views

SUSE CVE-2023-24533

Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this...

7.5CVSS7AI score0.00674EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/21 1:59 a.m.•9 views

SUSE CVE-2023-23919

A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread...

7.5CVSS6.6AI score0.02209EPSS
SaveExploits1References10
CNVD
CNVD
•added 2023/02/20 12:00 a.m.•20 views

Fortinet FortiOS Encryption Issue Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. Fortinet FortiOS has a...

3.3CVSS6.7AI score0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/02/16 12:00 a.m.•20 views

PT-2023-2002 · Node.Js +9 · Node.Js +9

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 19.2.0 Node.js versions prior to 18.14.1 Node.js versions prior to 16.19.1 Node.js versions prior to 14.21.3 Description: A cryptographic issue exists that may not clear the OpenSSL error stack after certain...

9.8CVSS6.1AI score0.75116EPSS
SaveExploits7References137
Rows per page
Query Builder