Design/Logic Flaw

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext...

CVE-2023-35763 Iagona ScrutisWeb Use of Hard-coded Cryptographic Key

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext...

CVE-2023-35763

CVE-2023-35763 affects Iagona ScrutisWeb versions 2.1.37 and earlier. The vulnerability is described as a cryptographic flaw that could allow an unauthenticated attacker to decrypt passwords in plaintext, associated with use of a hard-coded cryptographic key (CWE-321). Affected product: ScrutisWe...

CVE-2023-35763 Iagona ScrutisWeb Use of Hard-coded Cryptographic Key

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext...

PT-2023-25296 · Iagona · Iagona Scrutisweb

Name of the Vulnerable Software and Affected Versions: Iagona ScrutisWeb versions 2.1.37 and prior Description: The issue is related to a cryptographic vulnerability. This vulnerability could allow an unauthenticated user to decrypt encrypted passwords into plaintext. Recommendations: For Iagona...

Amazon Linux 2023 : nodejs, nodejs-devel, nodejs-full-i18n (ALAS2023-2023-226)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-226 advisory. In some cases Node.js did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on...

CVE-2023-32449

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks...

Dgraph 加密问题漏洞

Dgraph is Dgraph open source a horizontally scalable distributed GraphQL database with a graph backend. Dgraph version before 23.0.0 has a cryptographic problem vulnerability , the vulnerability stems from a nounce conflict , an attacker can use the vulnerability to brute-force attack on the log...

Canon IJ Network Tool 加密问题漏洞

Canon IJ Network Tool is a network tool from Canon Japan. A vulnerability exists in Canon IJ Network Tool version 4.7.5 and earlier for OS X 10.9.5-macOS 13 operating systems, IJ Network Tool version 4.7.3 and earlier for OS X 10.7.5-OS X 10.8 operating systems due to a cryptographic issue. An...

CVE-2023-28076

CloudLink 7.1.2 and all prior versions contain a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability leading to some information disclosure...

XKCP: buffer overflow in the SHA-3 reference implementation

A flaw was found in the Keccak XKCP SHA-3 reference implementation. The sponge function interface allows partial input data to be processed, and partial output to be produced. When at least one of these has a length of 4294967096 bytes or more, it can result in elimination of cryptographic...

PT-2023-12684 · Ibm · Ibm Qradar Data Synchronization App

Name of the Vulnerable Software and Affected Versions: IBM QRadar Data Synchronization App versions 1.0 through 3.0.1 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information...

IBM Safer Payments Encryption Issue Vulnerability

IBM Safer Payments is the first true payment processing cognitive fraud prevention solution from IBM USA. helps clients create customized, user-friendly decision models. IBM Safer Payments has a cryptographic issue vulnerability that stems from the use of weaker-than-expected encryption algorithm...

CVE-2023-25934

DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability. A network attacker with an ability to intercept the request could potentially exploit this vulnerability to modify the body data of the request...

CVE-2023-27557 IBM Safter Payments information disclosure

IBM Counter Fraud Management for Safer Payments 6.1.0.00 through 6.1.1.02, 6.2.0.00 through 6.2.2.02, 6.3.0.00 through 6.3.1.02, 6.4.0.00 through 6.4.2.01, and 6.5.0.00 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM...

IBM Safer Payments 加密问题漏洞

IBM Safer Payments is the first true payment processing cognitive fraud prevention solution from IBM USA. helps clients create customized, user-friendly decision models. IBM Safer Payments has a cryptographic issue vulnerability that stems from the use of weaker-than-expected encryption algorithm...

CVE-2021-33589

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm...

IBM SDK, Java Technology Edition 加密问题漏洞

IBM SDK, Java Technology Edition is a software development kit for Java application development from International Business Machines IBM. IBM SDK, Java Technology Edition is vulnerable to a cryptographic issue. An attacker could exploit this vulnerability to obtain sensitive information...

CentOS 8 : nodejs:16 (CESA-2023:1582)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:1582 advisory. - The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...

SUSE SLES15 / openSUSE 15 Security Update : nodejs18 (SUSE-SU-2023:0738-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0738-1 advisory. Update to NodeJS 18.14.2 LTS: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via...