Lucene search
+L

503 matches found

Vulnrichment
Vulnrichment
added 2021/07/06 10:56 a.m.10 views

CVE-2021-24005

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key...

4CVSS5.4AI score0.00563EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/06 10:56 a.m.33 views

CVE-2021-24005

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key...

4CVSS7.7AI score0.00563EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/25 7:15 p.m.26 views

CVE-2021-33529

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device...

7.5CVSS0.00934EPSS
SaveExploits0References1
Prion
Prion
added 2021/06/25 7:15 p.m.26 views

Hardcoded credentials

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device...

5CVSS7.6AI score0.00934EPSS
SaveExploits0References1Affected Software8
CVE
CVE
added 2021/06/25 6:25 p.m.97 views

CVE-2021-33529

CVE-2021-33529 affects Weidmueller Industrial WLAN devices. The vulnerability arises from hard-coded cryptographic keys in the service agent binary, enabling decryption of captured network traffic to/from the device. Affected versions are indicated in the CVE record; no specific patch/version is ...

7.5CVSS7.6AI score0.00934EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/06/25 6:25 p.m.28 views

CVE-2021-33529 WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device...

7.5CVSS7.8AI score0.00934EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.48 views

SUSE: Security Advisory (SUSE-SU-2012:1428-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.6CVSS5.3AI score0.04346EPSS
SaveExploits2References2
NVD
NVD
added 2021/05/25 5:15 p.m.26 views

CVE-2021-29708

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

6.7CVSS0.00262EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/25 5:15 p.m.8 views

CVE-2021-29708

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

6.7CVSS5.8AI score0.00262EPSS
SaveExploits0References2
Prion
Prion
added 2021/05/25 5:15 p.m.24 views

Code injection

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

4.6CVSS6.1AI score0.00262EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/05/25 4:00 p.m.25 views

CVE-2021-29708

IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883...

6.7CVSS6.2AI score0.00262EPSS
SaveExploits0References2
CVE
CVE
added 2021/05/25 4:00 p.m.68 views

CVE-2021-29708

CVE-2021-29708 affects IBM Spectrum Scale CNSA 5.1.0.1. A local attacker with access to the GUI pod container could obtain sensitive cryptographic keys, enabling privilege elevation to a privileged core-pod user. The IBM bulletin confirms the vulnerability and provides a fix: upgrade to Spectrum ...

6.7CVSS6.1AI score0.00262EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/04/22 8:15 p.m.12 views

CVE-2021-0266

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to...

9.8CVSS5.8AI score0.0088EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/22 8:15 p.m.34 views

CVE-2021-0266

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to...

9.8CVSS0.0088EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/22 8:15 p.m.24 views

Hardcoded credentials

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to...

7.5CVSS9.3AI score0.0088EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/22 7:37 p.m.39 views

CVE-2021-0266 cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to...

8.1CVSS9.7AI score0.0088EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/22 7:37 p.m.74 views

CVE-2021-0266

CVE-2021-0266 affects Juniper Networks Junos OS on cSRX Series. The root cause is the use of multiple hard-coded cryptographic keys in cSRX deployments, enabling an attacker to take control of any instance via device management services. Reported affected versions include all prior to 20.2R3, 20....

9.8CVSS9AI score0.0088EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.88 views

SUSE: Security Advisory (SUSE-SU-2018:0115-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.93838EPSS
SaveExploits19References18
ATTACKERKB
ATTACKERKB
added 2021/04/14 4:00 p.m.9 views

CVE-2021-0266

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to...

9.8CVSS7.7AI score0.0088EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2021/04/12 2:15 p.m.26 views

CVE-2021-24227

The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site. Using this attack vector, an attacker could leak important internal files like wp-config.php, which contains database credentials a...

7.5CVSS0.05927EPSS
SaveExploits1References2
Rows per page
Query Builder