Lucene search
K

690 matches found

Cvelist
Cvelist
added 2023/07/18 6:55 p.m.12 views

CVE-2023-28021 BigFix WebUI is vulnerable to use of a risky cryptographic algorithm

The BigFix WebUI uses weak cipher suites...

5.9CVSS7.8AI score0.00152EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/07/18 6:55 p.m.9 views

CVE-2023-28021 BigFix WebUI is vulnerable to use of a risky cryptographic algorithm

The BigFix WebUI uses weak cipher suites...

5.9CVSS7AI score0.00152EPSS
Exploits0References1
CNVD
CNVD
added 2023/07/14 12:0 a.m.5 views

Linux kernel denial of service vulnerability (CNVD-2023-56639)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A denial of service vulnerability exists in the Linux kernel, which originates from a flaw found in the skcipherrecvmsg symmetric-key cryptographic algorithm interface...

6.2CVSS6.2AI score0.00009EPSS
Exploits0References1
Redos
Redos
added 2023/07/06 12:0 a.m.18 views

ROS-2-1568

2.1568 Nettle library vulnerabilityCVE-2021-20305 1. Vulnerability Description: A vulnerability in the Nettle library that involves the use of a failed cryptographic algorithm and allows a remote unauthenticated attacker to execute arbitrary code.Identifier of the Information Security Threats Dat...

8.1CVSS7.5AI score0.00145EPSS
Exploits0
Redos
Redos
added 2023/07/06 12:0 a.m.20 views

ROS-2-1319

2.1319 Nettle library vulnerabilityCVE-2021-20305 1. Vulnerability Description: A Nettle library vulnerability involving the use of a failed cryptographic algorithm and allowing an unauthenticated remote attacker to execute arbitrary code.FSTEC Russia Information Security Threats Data Bank...

8.1CVSS8.3AI score0.00145EPSS
Exploits0
ICS
ICS
added 2023/06/29 6:0 a.m.25 views

Ovarro TBox RTUs

1. EXECUTIVE SUMMARY ​CVSS v3 7.2 ​ATTENTION: Exploitable remotely/low attack complexity ​Vendor: Ovarro ​Equipment: TBox RTUs ​Vulnerabilities: Missing Authorization, Use of Broken or Risky Cryptographic Algorithm, Inclusion of Functionality from Untrusted Control Sphere, Insufficient Entropy,...

7.2CVSS7.3AI score0.00143EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2023/06/29 12:0 a.m.18 views

Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200 Use of a Broken or Risky Cryptographic Algorithm (CVE-2018-7242)

Vulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. The algorithm used to encrypt the password is vulnerable to hash collision attacks. This plugin only works with...

9.8CVSS8.4AI score0.00247EPSS
Exploits0References4
NVD
NVD
added 2023/06/22 11:15 p.m.14 views

CVE-2023-28006

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure...

7.8CVSS7.1AI score0.0004EPSS
Exploits0References1
Prion
Prion
added 2023/06/22 11:15 p.m.11 views

Code injection

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure...

4.3CVSS7.6AI score0.0004EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/22 10:7 p.m.9 views

CVE-2023-28006 HCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm.

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure...

7CVSS6.9AI score0.0004EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/06/22 10:7 p.m.14 views

CVE-2023-28006 HCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm.

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure...

7CVSS7.8AI score0.0004EPSS
Exploits0References1
CVE
CVE
added 2023/06/22 10:7 p.m.43 views

CVE-2023-28006

CVE-2023-28006 affects the OSD Bare Metal Server (HCL BigFix OSD). The vulnerability stems from using a cryptographic algorithm that is no longer considered sufficiently secure. Documents indicate the issue concerns cryptographic strength with high impact across confidentiality, integrity, and av...

7.8CVSS7.1AI score0.0004EPSS
Exploits0References1Affected Software1
F5 Networks
F5 Networks
added 2023/06/22 5:57 p.m.43 views

K000135178: OpenSSL vulnerability CVE-2023-2650

Security Advisory Description Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJobj2txt directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message...

6.5CVSS7.1AI score0.91789EPSS
Exploits0Affected Software16
Positive Technologies
Positive Technologies
added 2023/06/22 12:0 a.m.1 views

PT-2023-21474 · Unknown · Osd Bare Metal Server

Name of the Vulnerable Software and Affected Versions: OSD Bare Metal Server affected versions not specified Description: The issue concerns the use of a cryptographic algorithm in the OSD Bare Metal Server that is no longer considered sufficiently secure. Recommendations: At the moment, there is...

7.8CVSS7.5AI score0.0004EPSS
Exploits0References3
NVD
NVD
added 2023/06/13 9:15 a.m.14 views

CVE-2022-43949

A use of a broken or risky cryptographic algorithm CWE-327 in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods...

7.5CVSS6.6AI score0.00151EPSS
Exploits0References1
Prion
Prion
added 2023/06/13 9:15 a.m.16 views

Design/Logic Flaw

A use of a broken or risky cryptographic algorithm CWE-327 in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods...

5CVSS7.5AI score0.00151EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/06/13 8:41 a.m.44 views

CVE-2022-43949

CVE-2022-43949 affects Fortinet FortiSIEM prior to 6.7.1, where the use of a broken or risky cryptographic algorithm (CWE-327) enables a remote unauthenticated attacker to perform brute force attacks on GUI endpoints by exploiting outdated hashing methods. The issue is documented across multiple ...

7.5CVSS7.5AI score0.00151EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/13 8:41 a.m.14 views

CVE-2022-43949

A use of a broken or risky cryptographic algorithm CWE-327 in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods...

6.2CVSS7AI score0.00151EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/06/13 8:41 a.m.20 views

CVE-2022-43949

A use of a broken or risky cryptographic algorithm CWE-327 in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods...

6.2CVSS7.7AI score0.00151EPSS
Exploits0References1
Fortinet
Fortinet
added 2023/06/12 12:0 a.m.23 views

FortiSIEM - Use of a Broken or Risky Cryptographic Algorithm

A use of a broken or risky cryptographic algorithm CWE-327 in FortiSIEM may allow a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods...

5CVSS7AI score0.00151EPSS
Exploits0Affected Software1
Rows per page
Query Builder